# Director, Governance Risk & Compliance

**Company**: Figma
**Location**: San Francisco, CA
**Work arrangement**: remote
**Experience**: executive
**Job type**: full-time
**Salary**: $235,000-$317,000
**Category**: Operations
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/figma/jobs/6211088004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_4177983b-166

## Description

Figma's Governance, Risk, and Compliance team is the foundation of how the company builds and maintains trust with users, regulators, business partners, and organisations that rely on Figma every day.

As a Governance, Risk and Compliance Director, you will lead the team through its next phase of growth, owning Figma's security compliance, risk management, and governance strategy end-to-end.

Key responsibilities:

- Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance priorities with company objectives and the Security leadership team

- Own Figma's certification and compliance portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC, and GDPR

- Lead and grow a team of compliance, risk, and governance professionals

- Build and evolve enterprise risk and controls frameworks

- Manage relationships with external auditors, assessors, and regulators

- Direct the selection and optimization of GRC platforms and tooling

- Partner with Sales, Legal, and Customer Trust on security questionnaires, customer audits, contracts, and trust-related communications

Requirements:

- 10+ years of experience in information security, compliance, or risk management

- Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001

- A track record of building GRC programs from the ground up or scaling them through high-growth stages

- Executive presence and exceptional written and verbal communication skills

- Experience implementing compliance programs for emerging products, including AI-enabled products

Nice to have:

- Supported FedRAMP authorization, SSP development, 3PAO coordination, or continuous monitoring activities

- Experience with global privacy and data protection regulations, such as GDPR or NIS2

- Security or risk certifications such as CISSP, CISA, CISM, or CRISC

- Hands-on experience implementing or administering GRC platforms such as Vanta, Drata, or similar tools

Figma offers a competitive package of benefits, including health, dental, and vision coverage, retirement benefits with company contributions, parental leave and reproductive or family planning support, mental health and wellness benefits, and paid time off.

Annual Base Salary Range: $235,000-$317,000 USD

## Skills

### Required
- GRC
- risk management
- compliance
- information security
- SOC 2
- ISO 27001

### Nice to have
- FedRAMP
- GDPR
- NIS2
- CISSP
- CISA
- CISM
- CRISC
- Vanta
- Drata

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/figma/jobs/6211088004?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)