Risk and Controls Manager

Meta is looking for a skilled Risk and Controls Manager to join our Finance Risk & Controls (R&C) team. The R&C team's goal is to empower Meta's Finance organization to achieve its strategic objectives. We provide risk & controls guidance in support of day-to-day operations and help our business partners proactively anticipate and manage the effects of upcoming process and system changes on the control environment. The Risk and Controls Manager will work closely with our Finance Business Process Owners and cross functional partners in IT and Internal Audit to support identification and mitigation of financial reporting, operational and related systems risks. They will have a comprehensive understanding of finance business processes, experience in designing and auditing internal controls, and effective communication skills to build stakeholder relationships and navigate ambiguity in a changing environment.

Risk and Controls Manager Responsibilities:

• Collaborate with process/control owners (and Engineering Products/Products Engineering teams where relevant) to understand the desired objectives for a corporate initiative, new business process, or new system implementation and advise on risk mitigation
• Facilitate walkthroughs to gain a comprehensive understanding of processes, which will inform our risk assessments
• Draft business process flow and execute risk assessment (identify, assess, and categorize risks)
• Design and influence the implementation of effective controls to sufficiently mitigate identified risks, based on detailed risk assessments
• Deliver process flow charts, Risk and Control Matrices, and Sarbanes-Oxley readiness/ Change Assessments packets to Internal Audit
• Provide regular updates on assessment results to cross-functional stakeholders, including Leadership team
• Identify opportunities for data/analytics based risk sensing & continuous controls monitoring
• Collaborate with internal business partners and stakeholders (example Finance, Enterprise Products, Business Process Owners, Internal Audit, Compliance, etc.) to continually evaluate and improve our risk management practices
• Contribute to the continuous evolution of the Risk & Controls team, including developing and maintaining our frameworks and process steps, team learnings etc

• Bachelor's degree in Accounting, Management Information Systems, or a related field
• 7+ years of experience in Internal or External Audit, Sarbanes-Oxley (SOX) Compliance, or Risk Management functions with a focus on business processes and IT/systems risks
• Proficiency with SOX 404, the Committee of Sponsoring Organizations (COSO) framework, Control Objectives for Information and Related Technology (COBIT) principles, IT security standards, and risk management best practices
• Demonstrated experience in identifying, designing, and testing controls to compliance requirements
• Demonstrated experience of crafting clear and concise communications to influence a wide range of stakeholders on intricate subjects such as but not limited to controls deficiencies & remediations
• Experience working in a cross-functional team setting to formulate effective risk management solutions

• Certified Public Accountant (CPA), Certified Internal Auditor (CIA), or Certified Information Systems Auditor (CISA) certifications
• Proficiency in executing both business process and systems risk assessments
• Experience within public accounting and/or other high-tech platform companies