About the company
Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all.
Responsibilities
- Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance priorities with company objectives
- Own Figma's certification and compliance portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC, and GDPR
- Lead and grow a team of compliance, risk, and governance professionals
- Build and evolve enterprise risk and controls frameworks, including AI Governance, Risk and Compliance initiatives
- Manage relationships with external auditors, assessors, and regulators
- Direct the selection and optimization of GRC platforms and tooling
- Partner with Sales, Legal, and Customer Trust on security questionnaires and customer audits
- Scale enterprise risk reporting to executive and board-level audiences
Requirements
- 10+ years of experience in information security, compliance, or risk management, including at least 4 years leading a GRC, security, or compliance team
- Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001
- A track record of building GRC programs from the ground up or scaling them through high-growth stages
- Executive presence and exceptional written and verbal communication skills
- Experience implementing compliance programs for emerging products, including AI-enabled products
Conditions
- Full time role, can be held from one of our US hubs or remotely in the United States
- Equity, health, dental, and vision coverage; retirement benefits; parental leave; mental health and wellness benefits