Director, GRC & Security Strategy

Figma; New York (NY); Remoto; USD 235.000 - 317.000; Tempo pieno

Vantaggi offerti da questo lavoro

Equity

Health, dental, vision

Retirement benefits

Parental leave

Paid time off

Disability accommodations

Descrizione del lavoro

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program, own certification portfolios, and scale risk controls across the product suite. This leadership role requires hands-on management of audits, cross‑functional collaboration, and strategic governance.

You’ll build and grow a team, partner with executives, regulators, and customers, and drive risk-based decisions that protect the business while enabling rapid growth. Remote-friendly in the US.

Competenze

• 10+ years in information security, compliance, or risk management, incl. 4+ years leading a GRC/security/compliance team.
• Hands-on with SOC 2 and ISO 27001, leading multiple audit cycles.
• Track record building or scaling GRC programs in SaaS or public company with SOX ITGC.
• Executive presence and ability to translate risk to executives, board and customers.
• Experience implementing compliance for AI-enabled products and cloud technologies.

Mansioni

• Set strategy and roadmap for GRC program, aligning with objectives and Security leadership.
• Own certification and compliance portfolio (SOC 2, ISO 27001, FedRAMP, GDPR) and expand coverage.
• Lead and grow compliance, risk, and governance team, building a culture of rigor.
• Develop enterprise risk and controls frameworks that scale across stakeholders.
• Manage relationships with auditors, assessors, and regulators; oversee audits.
• Select and optimize GRC platforms; maintain security policies and procedures.
• Partner with Sales, Legal, and Customer Trust on security questionnaires and audits.
• Scale enterprise risk reporting to executives and board.

Conoscenze

InfoSec

GRC leadership

Risk management

Executive comms

AI governance

Cross-functional

Strumenti

Vanta

Drata

Descrizione del lavoro

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program, own certification portfolios, and scale risk controls across the product suite. This leadership role requires hands-on management of audits, cross‑functional collaboration, and strategic governance.

You’ll build and grow a team, partner with executives, regulators, and customers, and drive risk-based decisions that protect the business while enabling rapid growth. Remote-friendly in the US.