Technical Program Manager, Security & Privacy

figure.ai; San Jose, Northern (CA, KY); Hybrid; USD 150,000 - 350,000; Full time

Job summary

Figure is seeking a Technical Program Manager to lead security and privacy initiatives from its San Jose office. The role centers on governance, compliance workflows, and the development of an overarching security program across the company.

You will coordinate with security and privacy engineers, drive enterprise controls, and ensure data protection aligns with product development and regulatory requirements, including SOC, NIST, ISO standards.

Qualifications

• Ability to build and drive programs affecting all parts of a business.
• Ability to effectively advocate for and influence strategic initiatives at the company level.
• Experience collaborating with internal and external senior stakeholders at the company.
• Strong technical grasp of security & privacy fundamentals, including enterprise controls, SDLC, machine learning, cryptography, data protection, network security, and more.
• Experience navigating global privacy compliance programs (GDPR, CCPA, DSA, etc.).
• Experience navigating industry certification, such as SOC-2, NIST, ISO 27001, ISO/TR 22100-4, IEC/TR 63074

Responsibilities

• Support a team of highly talented security and privacy engineers, fostering growth, innovation, and collaboration
• Set the vision for data and access governance, ensuring alignment with Figure’s business objectives
• Develop the security & privacy program at Figure, and work with teams across the company to implement necessary controls
• Ensure that security, privacy and data protection principles are seamlessly integrated into Figure’s products, services, and operations, while aligning with organizational goals and regulatory requirements
• Establish and enforce data governance policies and frameworks to ensure data integrity, security, and compliance
• Review security & privacy requirements for relevant industry standards and support certification efforts, including SOC, NIST, ISO, and more

Skills

Security governance

Privacy program leadership

Enterprise controls

SDLC

Machine learning security

Cryptography

Data protection

Network security

GDPR/CCPA

SOC-2 / NIST / ISO 27001

Education

Bachelors in Computer Science or equivalent

Job description

Technical Program Manager, Security & Privacy

San Jose, CA

Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 03, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It’s time to build.

We are looking for a Security TPM to join the Security & Privacy team at Figure, focusing on governance and compliance workflows, and development of our overall security program.

Responsibilities

• Support a team of highly talented security and privacy engineers, fostering growth, innovation, and collaboration
• Set the vision for data and access governance, ensuring alignment with Figure’s business objectives
• Develop the security & privacy program at Figure, and work with teams across the company to implement necessary controls
• Ensure that security, privacy and data protection principles are seamlessly integrated into Figure’s products, services, and operations, while aligning with organizational goals and regulatory requirements
• Establish and enforce data governance policies and frameworks to ensure data integrity, security, and compliance
• Review security & privacy requirements for relevant industry standards and support certification efforts, including SOC, NIST, ISO, and more

Requirements

• Ability to build and drive programs affecting all parts of a business
• Ability to effectively advocate for and influence strategic initiatives at the company level
• Experience collaborating with internal and external senior stakeholders at the company
• Strong technical grasp of security & privacy fundamentals, including enterprise controls, SDLC, machine learning, cryptography, data protection, network security, and more.
• Experience navigating global privacy compliance programs (GDPR, CCPA, DSA, etc.)
• Experience navigating industry certification, such as SOC-2, NIST, ISO 27001, ISO/TR 22100-4, IEC/TR 63074
• Bachelors in a technical field such as Computer Science or equivalent experience
• 8+ years of experience leading teams and large scale programs

The US base salary range for this full-time position is between $150,000 - $350,000 annually.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.