The opportunity
Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI.
What you'll do
Develop and verify technical security controls that satisfy multiple compliance frameworks
Collaborate with security, infrastructure, and product engineering teams to: translate compliance requirements into effective technical controls
Design and execute control testing procedures to assess control performance,: surface gaps, and verify that remediation is complete
Establish repeatable control assessments and continuous monitoring processes: to evaluate compliance effectiveness
Translate security requirements into structured, machine-readable JSON: definitions to support control management, testing, and automation
Build and maintain API integrations and automated workflows to streamline: evidence collection, control validation, and compliance processes
What they're looking for
- Identify opportunities to improve control effectiveness, reduce manual: effort, and scale compliance operations across multiple frameworks
- + years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering
- Experience with security compliance frameworks, including FedRAMP, SOC 2, ISO: 27001, and NIST 800-53, designing, implementing, and testing technical security controls in SaaS or cloud environments
- Experience testing security controls for design and operating performance,: including surfacing gaps and confirming fixes
