Remote Strategic Security Programs Lead

Socket.dev; San Francisco (CA); On-site; USD 169,000 - 296,000; Full time

Benefits offered by this job

Health, dental, vision

Retirement benefits

Parental leave

Job summary

Figma is seeking a Strategic Program Manager in Information Security to lead strategic security initiatives and partnerships across the organization. This fast-moving role will work with GRC, Security Operations, Security Engineering, Internal Audit, Legal, People, Product, Sales and business teams to design programs, manage portfolios, and drive results that scale with our growing business.

This remote-friendly role can be based in any US hub.

Qualifications

• 5+ years in security program management or related strategic role
• Experience leading cross-functional security programs
• Ability to communicate security risks to executives
• Experience developing security initiatives that drive adoption
• Familiarity with information security frameworks and practices

Responsibilities

• Lead strategic security programs from planning through execution across security and business teams
• Coordinate with GRC, Security Operations, Engineering, and Legal to align priorities
• Define and track program metrics, OKRs, and risk registers for leadership visibility
• Identify and remediate security gaps with control owners and stakeholders
• Design scalable security practices, policies, and change management plans
• Drive security awareness and training in partnership with stakeholders
• Support leadership with portfolio management and decision coordination

Skills

Security program mgmt

Cross-functional leadership

Security risk mgmt

Stakeholder communication

OKRs / metrics

Education

Bachelor's degree in information security or related field

Tools

NIST CSF

SOC 2

ISO 27001

Job description

Figma is seeking a Strategic Program Manager in Information Security to lead strategic security initiatives and partnerships across the organization. This fast-moving role will work with GRC, Security Operations, Security Engineering, Internal Audit, Legal, People, Product, Sales and business teams to design programs, manage portfolios, and drive results that scale with our growing business.

This remote-friendly role can be based in any US hub.