Process Risk and Compliance Operations Manager

<div class="content-intro"><p><span style="font-family: helvetica, arial, sans-serif; font-size: 12pt;">Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.</span></p></div><p><span style="font-family: arial, helvetica, sans-serif; color: #000000;"><strong>The Community You Will Join:</strong></span></p> <ul> <li>The Community Support org handles tens of millions of interactions yearly, engaging with Airbnb customers by phone, messaging, chat, or social media channels. The group handles hundreds of issues across categories including Cancellations, Account Issues, Refunds, Payments, Reservations, Extenuating Circumstances, Booking &amp; Listing issues, Safety &amp; Claims. The organization is globally distributed with offices in San Francisco, Dublin, Montreal, Seattle, Singapore, Manila, Gurgaon and an extensive partner network serving all regions.</li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; color: #000000;"><strong>The Difference You Will Make:</strong></span></p> <ul> <li>In this role you will own the strategic design and continuous evolution of risk frameworks, the risk registry, and executive risk narratives for Community Support — translating investigative findings, AI/ML model outputs, operational signals, and emerging threats into decisions and actions that protect Airbnb.</li> <li>A defining element of this role is your close partnership with the Insider Threat program. Together, you will form a complementary unit: you will ensure that investigative outcomes are contextualized within the broader risk ecosystem — informing risk appetite decisions, shaping detection strategy, and driving remediation accountability. You will co-own escalation frameworks, jointly challenge detection model effectiveness, and ensure that the feedback loop between investigations, risk governance, and AI-driven detection is robust and continuously improving.</li> <li>Beyond analysis and governance design, you will serve as the program manager for systemic root cause resolution — ensuring that when investigations, incidents, or risk assessments reveal structural vulnerabilities, those root causes do not languish in a findings log but are tracked, assigned, resourced, and driven to completion across the organization. This requires the discipline of program management combined with the authority and influence to hold cross-functional teams accountable for closing gaps.</li> <li>Critically, as Airbnb accelerates its use of AI and automation across operations, you will serve as a risk steward for AI systems that touch Community Support —&nbsp; leading governance and discussions of the implications of deploying AI in high-stakes decision-making environments. This is not a technical role; it is a role that requires you to ask the right questions of technical teams, interpret outputs with skepticism, and ensure that AI-driven processes are governed with the same rigor as human-driven ones.</li> <li>You will be joining a new team and have the opportunity to shape its development, taking on a growing leadership role over time. We are looking for someone with the drive to build something from nothing and push for growing excellence.</li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; color: #000000;"><strong>A Typical Day:&nbsp;</strong></span></p> <h4 style="padding-left: 40px;">Risk Strategy, Frameworks and AI Risk Governance</h4> <ul> <li>Design and own the CS Risk Appetite Framework — define guardrails, escalation triggers, and pre-approved response actions. This is not a documentation exercise; it requires continuous negotiation with senior leaders and cross-functional partners to calibrate organizational tolerance in a rapidly changing threat environment.</li> <li>Own and evolve the CS Risk Registry as a living strategic instrument. Your job is to challenge what gets prioritized, determine whether risk scores reflect reality, identify risks that automated systems miss entirely (e.g., emergent social engineering tactics, regulatory shifts, insider collusion patterns), and ensure accountability for remediation.</li> <li>Develop and stress-test risk assessment standards — including key risk indicators (KRIs), risk typologies, and emerging threat hypotheses. Critically evaluate whether existing KRIs remain meaningful or whether they have become stale proxies that create false confidence.</li> <li>Support the evolution of models and processes used in detection triage and investigation&nbsp; — not by building models, but by interrogating model assumptions and sources of risk.</li> <li>Establish ongoing governance cadences — risk review boards, quarterly risk assessments, and challenge sessions where risk assumptions are pressure-tested by diverse stakeholders, not simply ratified.</li> </ul> <h4 style="padding-left: 40px;">Investigations Partnership and Strategic Oversight</h4> <ul> <li>Collaborate closely with the Insider Threat Investigations to ensure investigative outcomes are systematically captured, contextualized, and integrated into risk governance. Your role is to provide the strategic risk lens — asking: <em>What does this pattern of findings tell us about our risk posture? Where are our blind spots? What should we investigate that we are not?</em></li> <li>Co-design escalation and review protocols for high-severity investigation findings and risk non-compliant transactions. Ensure that escalation criteria evolve as threat actors adapt, and that protocols account for edge cases that automated triage systems cannot handle.</li> <li>Participate in joint case reviews, postmortems, and incident debriefs to extract systemic insights: <em>Is this a one-off or a pattern? Does this reveal a control gap? Does this change our risk appetite?</em></li> <li>Provide strategic risk context to the Investigations team — help prioritize investigative focus areas based on risk registry intelligence, KRI trends, and organizational risk appetite rather than solely on case volume or severity scores.</li> <li>Coordinate the feedback loop between investigations and AI-driven detection systems — ensuring that investigative findings inform detection improvements, and that detection model performance is tracked, challenged, and reported as part of the broader risk posture.</li> </ul> <h4 style="padding-left: 40px;">Root Cause Resolution Program Management</h4> <ul> <li>Own the end-to-end lifecycle of root cause resolution — from the moment a systemic root cause is identified (through investigations, incidents, postmortems, risk assessments, or AI model failures) through to verified remediation and closure. This is not an analytical exercise alone; it is a program management discipline that requires tracking, accountability, and sustained cross-functional pressure.</li> <li>Maintain and govern a centralized root cause and remediation tracker that captures all identified systemic issues, assigns clear ownership, defines resolution milestones and deadlines, and provides real-time visibility into remediation progress. Ensure this tracker is reviewed at regular governance cadences and escalated