Figma is hiring a Director to lead its Governance, Risk and Compliance strategy, manage the GRC team, and oversee security compliance and enterprise risk frameworks. The role involves reporting to executives and the board and building compliance programs for emerging AI-enabled products.
What you’ll do
Lead GRC strategy and security compliance portfolio
Manage and grow the GRC team
Oversee audits and external relationships
Report on program health and risk posture to executives and board
Build cross-functional partnerships across Security, Legal, IT, Sales, and Engineering
Translate technical risk into business terms for executives, the board, and customers
What you’ll need
10+ years in information security, compliance, or risk management, including 4+ years leading a GRC team
Deep hands-on experience with SOC 2, ISO 27001, and SOX ITGC in public company environments
Proven track record building and scaling GRC programs through high-growth stages
Experience implementing compliance programs for AI-enabled products and cloud-based technologies
Strong executive presence and cross-functional partnership skills across Security, Legal, IT, Sales, and Engineering
Experience with FedRAMP, GDPR/NIS2, and GRC platforms such as Vanta or Drata
Original job description
Figma is hiring a Governance, Risk and Compliance Director to lead its GRC strategy, security compliance portfolio, and enterprise risk and controls frameworks. The role manages and grows the GRC team, oversees audits and external relationships, and reports on program health and risk posture to executives and the board.10+ years of experience in…