Director, Governance Risk & Compliance (Cybersecurity)

Location: Remote in the United States or onsite at Figma hubs in San Francisco, California, or New York, New York. In-person onboarding is required if hired.

Annual base salary: $235,000–$317,000 USD.

Company

Figma provides a collaborative design platform for brainstorming, prototyping, translating designs into code, and iterating with AI.

What you will do

• Set the strategy and roadmap for the governance, risk, and compliance program.
• Own the SOC 2, ISO 27001, FedRAMP, SOX ITGC, and GDPR certification and compliance portfolio.
• Lead and grow compliance, risk, and governance professionals.
• Build enterprise risk, controls, AI governance, and control-effectiveness frameworks.
• Manage external auditors, assessors, regulators, and audit remediation cycles.
• Partner with Sales, Legal, Customer Trust, Security, IT, and Engineering on customer audits, contracts, security questionnaires, and executive reporting.

Requirements

• 10+ years of experience in information security, compliance, or risk management.
• At least 4 years leading or managing a GRC, security, or compliance team.
• Hands-on experience with SOC 2 and ISO 27001 across multiple audit cycles.
• Experience building or scaling GRC programs, including SOX ITGC requirements in a public company environment.
• Strong executive communication and cross-functional partnership skills, including translating technical risk into business terms.
• Experience with cloud technologies and compliance programs for emerging or AI-enabled products.

Nice to have

• FedRAMP authorization, SSP development, 3PAO coordination, or continuous monitoring experience.
• Experience with GDPR, NIS2, or other global privacy and data protection regulations.
• CISSP, CISA, CISM, or CRISC certification.
• Experience with Vanta, Drata, or similar GRC platforms.
• Experience presenting to boards, steering committees, or audit committees.

Culture & Benefits

• Health, dental, and vision coverage.
• Retirement benefits with company contributions, parental leave, and family planning support.
• Mental health and wellness benefits, paid time off, paid sick leave, and holidays.
• Flexible paid time off for eligible exempt employees, subject to manager approval.
• Equity, annual bonus eligibility, recharge days, and possible home internet, phone, and lifestyle reimbursements.

Hiring process

• Interviews are conducted by video with cameras on.
• Reasonable accommodations are available throughout the application and interview process.