ZipRecruiter

Log In

1

Risk Program Manager Jobs in Washington (NOW HIRING)

Meta

Director, Security Risk Program

Washington, DC

$227K/yr

Drive cross-domain unification with Privacy Risk Management, Integrity Risk Management, Legal ... Own program financials and resourcing, and drive the strategy for automation and AI that scales ...

Meta

Director, Security Risk Program

Washington, DC · On-site

$227K - $287K/yr

The program delivers Global Security Risk Assessments (regulatory and commercial), Capability ... Minimum Qualifications • 15+ years of experience in security risk management, technology risk ...

Deloitte

Cyber Insider Risk Manager

Mclean, VA · On-site

Traditional security and integrated risk programs have often been unsuccessful in unifying the need ... Work you'll do As an Insider Risk Manager on the Cyber team, you will be responsible for:

CACI

Risk Manager

Reston, VA · On-site

Risk Manager Job Category ... Project and Program Management Time Type: Full time Minimum Clearance Required to Start: Secret ...

Cahaba Federal Solutions

Program Manager

Arlington, VA · On-site

The Program Manager (PM) provides overall management, direction, and leadership for the execution ... Provide research and analytical support to assess technical risk, program performance, procurement ...

Cahaba Federal Solutions

Program Manager

Arlington, VA · On-site

The Program Manager (PM) provides overall management, direction, and leadership for the execution ... Provide research and analytical support to assess technical risk, program performance, procurement ...

eNett

Risk Operations Program Manager

Washington, DC

About Team / Role As a Global Risk Operations Program Manager, you will be the strategic engine behind an organization managing over $100B in annual payments (inbound and outbound) and safeguarding ...

WEX

Risk Operations Program Manager

Washington, DC

About Team / Role As a Global Risk Operations Program Manager, you will be the strategic engine behind an organization managing over $100B in annual payments (inbound and outbound) and safeguarding ...

next page

Showing results 1-20

All JobsRisk Program JobsRisk Program Manager JobsRisk Program Manager Jobs in Washington

Risk Program Manager information

What are the typical challenges faced by a risk program manager when balancing compliance requirements with business objectives?

Risk Program Managers often encounter the challenge of ensuring strict adherence to regulatory and compliance standards while supporting the organization's strategic goals. This balancing act requires effective communication with both compliance teams and business leaders to align risk mitigation strategies with operational needs. It may involve prioritizing risks, negotiating acceptable risk levels, and fostering a culture of shared responsibility. Success in this area depends on strong analytical skills, stakeholder management, and the ability to translate complex risk data into actionable insights.

What are the key skills and qualifications needed to thrive as a risk program manager, and why are they important?

To thrive as a Risk Program Manager, you need expertise in risk assessment, compliance, project management, and a relevant degree such as in finance, business, or risk management. Familiarity with risk management frameworks, GRC (governance, risk, and compliance) tools, and certifications like CRMP or PMP are typically required. Strong analytical thinking, communication, and leadership skills help you effectively collaborate across departments and guide organizational risk strategies. These skills ensure the organization can proactively identify, assess, and mitigate risks while maintaining compliance and supporting business objectives.

What is the difference between Risk Program Manager vs Risk Analyst?

AspectRisk Program ManagerRisk Analyst
CredentialsCertifications like CRM, FRM, or PMP often preferredCertifications such as CRM or FRM may be beneficial but less common
Work EnvironmentOversees risk management programs across departments, strategic focusAnalyzes data, identifies risks, supports risk mitigation efforts
Employer & Industry UsageUsed in finance, insurance, large corporationsCommon in finance, banking, and consulting firms
Search & Comparison IntentLooking for managerial or program oversight rolesSeeking entry-level or analytical risk roles

The Risk Program Manager focuses on leading and coordinating comprehensive risk management strategies, while the Risk Analyst primarily analyzes data to identify and assess risks. Both roles are essential in risk management but differ in scope and responsibilities.

Do risk program managers make good money?

Risk program managers typically earn competitive salaries that vary based on experience, industry, and location. According to industry data, the median annual salary ranges from $90,000 to $130,000, with higher earnings possible for those with advanced certifications like PMP or CRISC. They often work in corporate environments, managing risk mitigation strategies and compliance efforts.

What does a risk program manager do?

A risk program manager oversees an organization’s risk management initiatives, developing strategies to identify, assess, and mitigate potential risks across various departments. They coordinate risk assessments, implement policies, and ensure compliance with regulations, often using tools like risk management software and requiring certifications such as PMP or CRM. Their role involves continuous monitoring and reporting to support informed decision-making and organizational resilience.

What are popular job titles related to Risk Program Manager jobs in Washington?

For Risk Program Manager jobs in Washington, the most frequently searched job titles are:

What job categories do people searching Risk Program Manager jobs in Washington look for?

The top searched job categories for Risk Program Manager jobs in Washington are:

What cities in Washington are hiring for Risk Program Manager jobs?

Cities in Washington with the most Risk Program Manager job openings:

Risk Program Manager jobs near you
Infographic showing various Risk Program Manager job openings in Washington as of August 2026, with employment types broken down into 1% As Needed, 78% Full Time, 18% Part Time, 1% Temporary, and 2% Contract. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution.

Program Manager, Security Risk Program

Washington, DC

Meta
Internet and IT • 10K+ employees
Learn more about Metaexternal

$153K/yr

Full-time

Posted 8 days ago

Meta rating

7.8

Company rating: 7.8 out of 10

Based on 45 frontline employees who took The Breakroom Quiz

Job description

We are building a governance, risk, and compliance function to enable our company to buildproducts that can withstand regulatory scrutiny, and ensure Meta continues to meet globalregulatory requirements and manage risk. Meta's Risk and Compliance Program (RCP) is the central engine driving risk management and compliance at the company, supporting Meta and the family of apps. Within RCP, the Security Risk Program (SRP) is the second-line function accountable for how Meta identifies, assesses, quantifies, and reports its security risk posture — delivering global security risk assessments, Capability Maturity & Effectiveness (CME) evaluations, AI and cloud risk assessments, and board-level and regulatory reporting.We are seeking a Security Risk Program Manager to build one of the program's highest-priority new capabilities: security risk assessment of AI product launches. Today, AI launches receivead-hoc coverage through security risk assessments designed for infrastructure — not forproduct-launch cadence, and not for cross-domain AI risk spanning Security, Privacy, Integrity,and Legal. You will design that capability from the ground up and scale it from roughly fiveassessments per quarter today to twenty or more per quarter by H1 2027, in step with Meta's AIproduct velocity.This is a builder and an influencer role in equal measure. AI launch risk cannot beassessed by one function acting alone — it requires Central Security, product groups, Privacy,Integrity, and Legal moving through a shared process on a launch timeline. You will own thatoperating model: translating product and engineering reality into a defensible risk position, andtranslating regulatory obligation into assessment work that product teams can actually absorbwithout stalling a launch. The ideal candidate is comfortable with ambiguity, effective inhigh-pressure and fast-moving situations, and able to build durable relationships across a widerange of technical and non-technical stakeholders.
Program Manager, Security Risk Program Responsibilities:
  • Design and implement Meta's AI Launch Risk Assessment framework end to end — intake criteria, cross-domain risk taxonomy, assessment methodology, and launch-gate outputs — and scale delivery from ~5 to 20+ assessments per quarter by H1 2027.
  • Build and partner to manage the XFN operating model that coordinates Central Security, product groups, Privacy Risk Management, Integrity Risk Management, and Legal through each assessment, with clear roles, handoffs, and decision rights on a launch timeline.
  • Partner directly with product and engineering teams on high-priority AI launches — engaging early enough that security risk review informs design decisions rather than gating release, and giving product teams a predictable, well-documented path through second-line review.
  • Serve as the connection point between the Security Risk Program, Central Security leadership, Legal, and first-line business teams, representing security risk positions and negotiating assessment scope, sequencing, and remediation commitments.
  • Build and maintain a consolidated AI risk register that gives leadership a single view of.
  • security risk across the AI product portfolio, and produce the reporting that keeps that view current for VP and executive audiences.
  • Define tooling requirements and drive AI-enabled automation across the assessment lifecycle — identifying where automation can scale throughput without compromising assessment defensibility, and partnering with tooling and engineering owners to deliver it.
  • Ensure assessments and supporting artifacts are produced to internal standards, are.
  • submission-ready, and constitute defensible evidence of systematic security due diligence for regulators and auditors (including EU AI Act and NIST AI RMF expectations).
  • Identify risks, dependencies, and blockers across the program, define mitigation plans, monitor key delivery and SLA metrics, and drive corrective action with stakeholders when performance deviates.
  • Create and facilitate presentations that build senior leadership understanding and influence decision-making, and provide mentorship and guidance to junior team members on program design and assessment practice.

Minimum Qualifications:
  • 8+ years of experience in governance, risk, and compliance, security risk management,
  • regulatory compliance, or a directly related discipline
  • 3+ years of program management experience in a corporate environment
  • Experience with risk and compliance precepts, practices, and solutions
  • Demonstrated experience designing a program or process from the ground up — not solely running an established one — including methodology, operating model, and rollout
  • Demonstrated experience driving cross-functional alignment across technical and non-technical partners without direct authority, including with engineering or product organizations
  • Proven verbal and written communication skills, with success influencing a range of audiences including senior leadership

Preferred Qualifications:
  • Experience assessing or managing risk for AI or machine learning systems, or familiarity with AI-specific regulatory and risk frameworks (EU AI Act, NIST AI RMF)
  • Experience embedding risk, security, or compliance review into a fast-moving product
  • development lifecycle and launch process
  • Experience working in information security and/or cybersecurity
  • Experience partnering with a central security or infrastructure security organization as a
  • second-line risk function
  • Experience defining tooling requirements or applying automation and AI to scale GRC operations
  • Knowledge of global regulatory frameworks, compliance practices, and risk management best
  • practices
  • experience with risk assessments, regulatory responses, audits, or control design
  • 3+ years working in a corporate environment subject to audit against federal or industry-wide regulations
  • Experience in a technology, financial services, consulting, or related field
  • Advanced degree and/or relevant certification (CISSP, CRISC, CISM, CISA)
  • Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
  • Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
  • Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

About Meta:
Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.
Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@meta.com.
$153,000/year to $209,000/year + bonus + equity + benefits
Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.

What Meta employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply