The opportunity
Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI.
What you'll do
Set the strategy and roadmap for Figma's GRC program, aligning compliance,: risk, and governance priorities with company objectives and the Security leadership team
Own Figma's certification and compliance portfolio, including SOC 2, ISO: 27001, FedRAMP, SOX ITGC, and GDPR, and expand coverage as Figma enters new markets and customer segments
Lead and grow a team of compliance, risk, and governance professionals,: setting priorities, developing talent, and building a culture of rigor and pragmatism
Build and evolve enterprise risk and controls frameworks: including AI Governance, Risk and Compliance initiatives and control effectiveness monitoring — that scale across technical and business stakeholders
Manage relationships with external auditors, assessors, and regulators, and: oversee audit cycles from planning through remediation
Direct the selection and optimization of GRC platforms and tooling, and: maintain the lifecycle of security policies, standards, and procedures
What they're looking for
- Partner with Sales, Legal, and Customer Trust on security questionnaires,: customer audits, contracts, and trust-related communications that support the sales lifecycle
- Scale enterprise risk reporting and report on program health, risk posture,: and audit readiness to executive and board-level audiences
- + years of experience in information security, compliance, or risk: management, including at least 4 years leading or managing a GRC, security, or compliance team
- Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001,: including leading programs through multiple audit cycles
