Remote Compliance Engineer: Security Controls & Frameworks

Figma; United States; Hybrid; USD 169,000 - 296,000; Full time

Benefits offered by this job

Equity

Health, dental, and vision coverage

Retirement benefits with company match

Parental leave and family planning

Mental health and wellness benefits

Paid time off

Paid sick leave and holidays

Job summary

Figma is seeking a Compliance Engineer to design, implement, and test security controls across FedRAMP, SOC 2, ISO 27001, and NIST. You will translate regulatory requirements into technical controls, automate control definitions in JSON, and collaborate with security, infra, and product teams to scale compliance efforts.

The role supports multiple frameworks, with a focus on automation, testing, evidence collection, and continuous monitoring.

Qualifications

• 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering.
• Experience with FedRAMP, SOC 2, ISO 27001, and NIST 800-53 designing, implementing, and testing technical security controls in SaaS or cloud environments.
• Experience testing security controls for design and operating performance, surfacing gaps and confirming fixes.

Responsibilities

• Develop and verify technical security controls that satisfy multiple compliance frameworks.
• Collaborate with security, infrastructure, and product engineering teams to translate compliance requirements into effective technical controls.
• Design and execute control testing procedures to assess control performance, surface gaps, and verify remediation.
• Establish repeatable control assessments and continuous monitoring processes to evaluate compliance effectiveness.
• Translate security requirements into machine-readable JSON definitions to support control management, testing, and automation.
• Build and maintain API integrations and automated workflows to streamline evidence collection, control validation, and compliance processes.
• Identify opportunities to improve control effectiveness and scale compliance operations across multiple frameworks.

Skills

Security compliance

Cloud security concepts

Engineering collaboration

Automation scripting

Compliance testing

Education

Bachelor's degree in a relevant field

Tools

JSON

REST APIs

Python

Job description

Figma is seeking a Compliance Engineer to design, implement, and test security controls across FedRAMP, SOC 2, ISO 27001, and NIST. You will translate regulatory requirements into technical controls, automate control definitions in JSON, and collaborate with security, infra, and product teams to scale compliance efforts.

The role supports multiple frameworks, with a focus on automation, testing, evidence collection, and continuous monitoring.