Director, Governance & Compliance

📋 Description

• Set the strategy and roadmap for Figma's GRC program, aligning compliance, risk, and governance
• Own Figma's certification and compliance portfolio, including SOC 2, ISO 27001, FedRAMP, SOX ITGC
• Lead and grow a team of compliance, risk, and governance professionals, setting priorities
• Build and evolve enterprise risk and controls frameworks — including AI Governance, Risk and
• Manage relationships with external auditors, assessors, and regulators, and oversee audit cycles
• Direct the selection and optimization of GRC platforms and tooling, and maintain the lifecycle of

🎯 Requirements

• 10+ years of experience in information security, compliance, or risk management, including at least
• Deep, hands-on experience with frameworks such as SOC 2 and ISO 27001, including leading programs
• A track record of building GRC programs from the ground up or scaling them through high-growth
• Executive presence and exceptional written and verbal communication skills, with demonstrated
• Experience implementing compliance programs for emerging products, including AI-enabled products

🎁 Benefits

• Equity
• Health, dental, and vision coverage
• Retirement benefits with company contributions
• Parental leave and reproductive or family planning support
• Mental health and wellness benefits
• Paid time off, paid sick leave, holidays, and other leave benefits