В Figma чётко определена роль senior-инженера по комплаенсу, есть сильный пакет льгот и зарплата выше рыночного ориентира. Автоматизация добавляет работе технической глубины.
Кликните для подробной информации
Чёткие задачиСовременные технологииВыше рынкаХороший соцпакетТолько США
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Compliance Engineer (Security Compliance/Automation): Designing and testing technical security controls for FedRAMP, SOC 2, ISO 27001, and NIST frameworks with an accent on cloud security, control effectiveness, and scalable compliance operations. Focus on building JSON-based control definitions, API integrations, automated evidence collection, and continuous monitoring workflows.
Location: Remote within the United States or from Figma hubs in San Francisco, California, and New York, New York. In-person onboarding is required.
Annual base salary: $169,000–$296,000 USD
Company
Figma develops a collaborative design platform that helps teams brainstorm, prototype, translate designs into code, and iterate with AI in real time.
What you will do
Develop and verify technical security controls for FedRAMP, SOC 2, ISO 27001, and NIST frameworks.
Collaborate with security, infrastructure, and product engineering teams to implement compliance requirements as technical solutions.
Design and execute control testing procedures, identify gaps, and verify remediation.
Establish repeatable control assessments and continuous monitoring processes.
Define compliance controls in machine-readable JSON and build API integrations and automated workflows for evidence collection and validation.
Improve control effectiveness, reduce manual work, and scale compliance operations across multiple frameworks.
Requirements
5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering.
Experience designing, implementing, and testing technical controls in SaaS or cloud environments.
Experience assessing control design and operating performance, identifying gaps, and confirming fixes.
Understanding of cloud security, including identity and access management, vulnerability management, logging, and security configurations.
Experience with JSON, REST APIs, and automation applied to compliance engineering.
Remote work is limited to the United States, and in-person onboarding is required.
Nice to have
Experience with JSON Schema, OSCAL, machine-readable compliance documentation, or automated evidence collection.
Proficiency in Python or similar scripting languages.
Experience with Git, version control, collaborative development workflows, or AWS cloud security technologies.
Culture & Benefits
Health, dental, and vision coverage with retirement benefits and company contributions.
Parental leave, reproductive and family planning support, and mental health and wellness benefits.
Paid time off, paid sick leave, holidays, and flexible paid time off for eligible exempt employees.
Equity, possible recharge days, home internet and cell phone reimbursements, and lifestyle spending accounts.
Reasonable accommodations are available throughout the application, interview, and employment process.
Hiring process
Interview evaluation considers qualifications, relevant experience, potential impact, and role scope.
Video interviews require candidates to keep their cameras on.
In-person onboarding is required after hiring.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →