Opportunity at
FigmaDirector, Governance Risk & Compliance
Figma is hiring a Director of Governance, Risk and Compliance to lead its GRC team through its next phase of growth. The role sets strategy for…
Career Tools
About This Role
Figma is hiring a Director of Governance, Risk and Compliance to lead its GRC team through its next phase of growth. The role sets strategy for security compliance, risk management and governance, owns the certification portfolio and manages relationships with auditors and regulators. It is a full-time leadership position that can be held from a US hub or remotely within the United States, and suits a manager with a long…
Job Description
Figma is hiring a Director of Governance, Risk and Compliance to lead its GRC team through its next phase of growth. The role sets strategy for security compliance, risk management and governance, owns the certification portfolio and manages relationships with auditors and regulators. It is a full-time leadership position that can be held from a US hub or remotely within the United States, and suits a manager with a long record in security and compliance.
Responsibilities
- Set strategy and the roadmap for the GRC program, aligned with security leadership and company goals
- Own the certification portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC and GDPR
- Build risk and controls frameworks, including AI governance, that scale with the business
- Manage external auditors, assessors and regulators through audit cycles to remediation
Requirements
- 10+ years in information security, compliance or risk management, including 4+ years leading a GRC, security or compliance team
- Deep hands-on experience with SOC 2 and ISO 27001 across multiple audit cycles
- Track record of building or scaling GRC programs at a SaaS or platform company, including SOX ITGC work
- Executive presence and clear communication with executives, the board and customers
Qualifications
- Experience supporting FedRAMP authorization is listed as a plus
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where can the role be held?
From one of Figma's US hubs or remotely within the United States.
What experience is required?
At least 10 years in information security, compliance or risk management, including 4 years leading a team.
Does the posting state a salary?
The excerpt available here does not state a salary figure.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.