Remote GRC Director: Security, Compliance & Risk Strategy

Figma; San Francisco (CA); Hybrid; USD 235,000 - 317,000; Full time

Benefits offered by this job

Equity ownership

Health, dental, vision coverage

Retirement benefits

Parental leave and family planning

Mental health benefits

Paid time off

Job summary

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program end-to-end, setting strategy for certification, risk management, and governance while growing a team of professionals across security, legal, IT, sales and engineering.

You will partner with executives, regulators, and customers to build scalable controls and drive audit readiness in a rapidly evolving SaaS environment. This is a full-time role possible from US hubs or remote within the United States.

Qualifications

• 10+ years of experience in information security, compliance, or risk management, including at least 4 years leading or managing a GRC, security, or compliance team.
• Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001, including leading programs through multiple audit cycles.
• A track record of building GRC programs from the ground up or scaling them through high-growth stages, ideally at a SaaS or platform company, including SOX ITGC experience.
• Executive presence and exceptional written and verbal communication skills with cross-functional partnership across Security, Legal, IT, Sales, and Engineering.

Responsibilities

• Set the strategy and roadmap for Figma's GRC program aligning priorities with company objectives.
• Own certification and compliance portfolio (SOC 2, ISO 27001, GDPR) and expand coverage as needed.
• Lead and grow a team of compliance, risk, and governance professionals.
• Develop enterprise risk and controls frameworks that scale across stakeholders.
• Manage relationships with external auditors and regulators; oversee audit cycles.
• Select and optimize GRC platforms and tooling; maintain security policies and procedures.
• Collaborate with Sales, Legal, and Customer Trust on questionnaires and audits.
• Scale enterprise risk reporting to executives and the board.

Skills

Information security

Risk management

Compliance

GRC leadership

Executive communication

Tools

Vanta

Drata

Job description

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program end-to-end, setting strategy for certification, risk management, and governance while growing a team of professionals across security, legal, IT, sales and engineering.

You will partner with executives, regulators, and customers to build scalable controls and drive audit readiness in a rapidly evolving SaaS environment. This is a full-time role possible from US hubs or remote within the United States.