Senior Director, GRC & Compliance Strategy

Figma; United States; Remote; USD 235.000 - 317.000; Vollzeit

Benefits dieser Stelle

Equity

Health insurance

Dental coverage

Vision coverage

Retirement plan

Parental leave

Mental health benefits

Paid time off

Zusammenfassung

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program, owning security compliance, risk management, and governance strategy end to end. You’ll set direction for the certification portfolio, build scalable controls, and represent GRC to executives, the board, customers, and regulators.

This full-time role can be remote in the United States, with hubs across the country, and involves managing a team of GRC professionals while partnering with Sales, Legal, and Customer

Qualifikationen

• 10+ years in information security, compliance, or risk management.
• 4+ years leading or managing a GRC, security, or compliance team.
• Experience with SOC 2 and ISO 27001 audits.
• Executive communication and cross-functional collaboration.
• Experience with AI governance and cloud technologies.

Aufgaben

• Set strategy and roadmap for Figma's GRC program, aligning priorities with security leadership.
• Own certification and compliance portfolio (SOC 2, ISO 27001, FedRAMP, SOX ITGC, GDPR).
• Lead and grow a team of compliance, risk, and governance professionals.
• Build scalable enterprise risk and controls frameworks across stakeholders.
• Manage relationships with auditors, regulators, and assessors; oversee audits.

Kenntnisse

information security

compliance

risk management

GRC

leadership

stakeholder management

audits

Tools

Vanta

Drata

Jobbeschreibung

Figma is seeking a Governance, Risk and Compliance Director to lead the GRC program, owning security compliance, risk management, and governance strategy end to end. You’ll set direction for the certification portfolio, build scalable controls, and represent GRC to executives, the board, customers, and regulators.

This full-time role can be remote in the United States, with hubs across the country, and involves managing a team of GRC professionals while partnering with Sales, Legal, and Customer