Security & Privacy TPM: Lead Governance, Compliance & Programs

Figure; San Jose (CA); On-site; USD 150,000 - 350,000; Full time

Job summary

Figure, an AI robotics company based in San Jose, CA, seeks a Security TPM to join the Security & Privacy team, focusing on governance and compliance workflows and developing the overall security program.

Responsibilities include setting the vision for data and access governance, building the security program across the company, ensuring integration of security and privacy into products, and aligning with regulatory standards such as SOC, NIST, ISO; requires 8+ years leading large programs.

Qualifications

• 8+ years of experience leading teams and large scale programs.
• Experience building governance and privacy programs that align with business objectives.
• Experience navigating global privacy compliance programs (GDPR, CCPA, DSA).
• Experience with industry certifications (SOC-2, NIST, ISO 27001).

Responsibilities

• Support security and privacy engineers, fostering growth and collaboration.
• Set the vision for data and access governance aligned with business objectives.
• Develop the security and privacy program across Figure and implement required controls.
• Ensure security, privacy, and data protection principles are integrated into products, services, and operations, aligned with regulations.
• Establish and enforce data governance policies and frameworks for data integrity and compliance.
• Review security and privacy requirements for standards and support certification efforts (SOC, NIST, ISO).

Skills

Governance

Privacy programs

Stakeholder management

Security architecture

Compliance automation

Data protection

Enterprise security controls

SDLC security

Cryptography

Cloud security

Education

Bachelor's in Computer Science

Tools

SOC 2

NIST

ISO 27001

ISO/TR 22100-4

IEC/TR 63074

Job description

Figure, an AI robotics company based in San Jose, CA, seeks a Security TPM to join the Security & Privacy team, focusing on governance and compliance workflows and developing the overall security program.

Responsibilities include setting the vision for data and access governance, building the security program across the company, ensuring integration of security and privacy into products, and aligning with regulatory standards such as SOC, NIST, ISO; requires 8+ years leading large programs.