Technical Program Manager, Security & PrivacyNew

Figure; San Jose (CA); On-site; USD 150,000 - 350,000; Full time

Job summary

Figure, an AI robotics company in San Jose, CA, seeks a Security TPM to lead governance and compliance efforts, developing the overall security program.

You will partner with security and privacy engineers, set data governance vision, and drive company-wide controls across products and operations to meet regulatory needs.

Qualifications

• 8+ years leading security programs or teams.
• Experience navigating GDPR, CCPA, DSA, and privacy regimes.
• Experience with SOC-2, ISO 27001, ISO/TR 22100-4, IEC/TR 63074.
• Ability to drive company-wide governance and data protection initiatives.
• Strong technical grasp of security fundamentals including cryptography, network security, and data protection.

Responsibilities

• Support a team of security and privacy engineers, fostering growth and collaboration.
• Set the vision for data and access governance aligned with business objectives.
• Develop and implement the security and privacy program across Figure.
• Integrate security and privacy into products, services, and operations while meeting regulatory requirements.
• Establish and enforce data governance policies to ensure integrity, security, and compliance.
• Review requirements for standards like SOC, NIST, ISO and support certification efforts.

Skills

Security governance

Privacy & data protection

Enterprise security controls

SDLC security

Machine learning security

Cryptography basics

Stakeholder management

Regulatory compliance (GDPR/CCPA)

Security program leadership

Education

Bachelor's in Computer Science or equivalent

Job description

Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 03, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It’s time to build.

We are looking for a Security TPM to join the Security & Privacy team at Figure, focusing on governance and compliance workflows, and development of our overall security program.

Responsibilities

• Support a team of highly talented security and privacy engineers, fostering growth, innovation, and collaboration
• Set the vision for data and access governance, ensuring alignment with Figure’s business objectives
• Develop the security & privacy program at Figure, and work with teams across the company to implement necessary controls
• Ensure that security, privacy and data protection principles are seamlessly integrated into Figure’s products, services, and operations, while aligning with organizational goals and regulatory requirements
• Establish and enforce data governance policies and frameworks to ensure data integrity, security, and compliance
• Review security & privacy requirements for relevant industry standards and support certification efforts, including SOC, NIST, ISO, and more

Requirements

• Ability to build and drive programs affecting all parts of a business
• Ability to effectively advocate for and influence strategic initiatives at the company level
• Experience collaborating with internal and external senior stakeholders at the company
• Strong technical grasp of security & privacy fundamentals, including enterprise controls, SDLC, machine learning, cryptography, data protection, network security, and more.
• Experience navigating global privacy compliance programs (GDPR, CCPA, DSA, etc.)
• Experience navigating industry certification, such as SOC-2, NIST, ISO 27001, ISO/TR 22100-4, IEC/TR 63074
• Bachelors in a technical field such as Computer Science or equivalent experience
• 8+ years of experience leading teams and large scale programs

The US base salary range for this full-time position is between $150,000 - $350,000 annually.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.