Назад
6 дней назад

Compliance Engineer

169 000 - 296 000$
Формат работы
remote (только USA)/onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Compliance Engineer (Security Compliance/Automation): Designing and testing technical security controls for FedRAMP, SOC 2, ISO 27001, and NIST frameworks with an accent on cloud security, control effectiveness, and scalable compliance operations. Focus on building JSON-based control definitions, API integrations, automated evidence collection, and continuous monitoring workflows.

Location: Remote within the United States or from Figma hubs in San Francisco, California, and New York, New York. In-person onboarding is required.

Annual base salary: $169,000–$296,000 USD

Company

Figma develops a collaborative design platform that helps teams brainstorm, prototype, translate designs into code, and iterate with AI in real time.

What you will do

  • Develop and verify technical security controls for FedRAMP, SOC 2, ISO 27001, and NIST frameworks.
  • Collaborate with security, infrastructure, and product engineering teams to implement compliance requirements as technical solutions.
  • Design and execute control testing procedures, identify gaps, and verify remediation.
  • Establish repeatable control assessments and continuous monitoring processes.
  • Define compliance controls in machine-readable JSON and build API integrations and automated workflows for evidence collection and validation.
  • Improve control effectiveness, reduce manual work, and scale compliance operations across multiple frameworks.

Requirements

  • 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering.
  • Experience designing, implementing, and testing technical controls in SaaS or cloud environments.
  • Experience assessing control design and operating performance, identifying gaps, and confirming fixes.
  • Understanding of cloud security, including identity and access management, vulnerability management, logging, and security configurations.
  • Experience with JSON, REST APIs, and automation applied to compliance engineering.
  • Remote work is limited to the United States, and in-person onboarding is required.

Nice to have

  • Experience with JSON Schema, OSCAL, machine-readable compliance documentation, or automated evidence collection.
  • Proficiency in Python or similar scripting languages.
  • Experience with Git, version control, collaborative development workflows, or AWS cloud security technologies.

Culture & Benefits

  • Health, dental, and vision coverage with retirement benefits and company contributions.
  • Parental leave, reproductive and family planning support, and mental health and wellness benefits.
  • Paid time off, paid sick leave, holidays, and flexible paid time off for eligible exempt employees.
  • Equity, possible recharge days, home internet and cell phone reimbursements, and lifestyle spending accounts.
  • Reasonable accommodations are available throughout the application, interview, and employment process.

Hiring process

  • Interview evaluation considers qualifications, relevant experience, potential impact, and role scope.
  • Video interviews require candidates to keep their cameras on.
  • In-person onboarding is required after hiring.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →