Compliance Engineer

About the company

• Figma is a platform helping teams bring ideas to life, from brainstorming to prototyping to code
• Mission to make design accessible to all

Responsibilities

• Develop and verify technical security controls satisfying multiple compliance frameworks
• Collaborate with security, infrastructure, and product engineering teams to translate compliance requirements into technical controls
• Design and execute control testing procedures, surface gaps, verify remediation
• Establish repeatable control assessments and continuous monitoring processes
• Translate security requirements into machine-readable JSON definitions
• Build and maintain API integrations and automated workflows for evidence collection
• Identify opportunities to improve control effectiveness and scale compliance operations

Requirements

• 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering
• Experience with FedRAMP, SOC 2, ISO 27001, NIST 800-53 in SaaS or cloud environments
• Experience testing security controls for design and operating performance
• Understanding of cloud security concepts: IAM, vulnerability management, logging, security configurations
• Experience with JSON, REST APIs, and automation

Nice-to-have

• JSON-based control definitions, JSON Schema, OSCAL
• Proficiency in Python or similar scripting languages
• Experience with Git and version control
• Hands-on experience with AWS

Conditions

• Full time role, US hubs or remote in the United States
• Equity, health, dental, vision coverage, retirement benefits
• Parental leave, mental health and wellness benefits, paid time off
• Annual base salary range: $169,000 – $296,000 USD