Figma
Director, Governance Risk & Compliance
$235K–$317K
San Francisco, CA • New York, NY • United States +1 · Director · Full-time · Posted Oct 14, 2026
- Location
- San Francisco, CA • New York, NY • United States
US - Experience
- 10+ years overall, including at least 4 years leading or managing a GRC, security, or compliance team.
About the job
Leads Figma’s Governance, Risk, and Compliance strategy, team, and programs to manage security compliance, enterprise risk, governance, and trust.
What you'll do
- Set the GRC strategy and roadmap, own the certification portfolio, and develop scalable risk and controls frameworks.
- Lead and grow the GRC team; oversee audits, external relationships, policies, and GRC platforms.
- Report risk and program health to executives and the board, and partner with Sales, Legal, and Customer Trust on customer assurance.
What they ask for
- 10+ years in information security, compliance, or risk management, including at least 4 years leading or managing a GRC, security, or compliance team.
- Hands-on experience with SOC 2 and ISO 27001 frameworks, including leading programs through multiple audit cycles.
- Track record building or scaling GRC programs; experience in a public company environment with SOX ITGC requirements.
- Experience implementing compliance for emerging products, including AI-enabled products, and understanding cloud-based technologies and their GRC implications.
Nice to have
- FedRAMP authorization or related experience; global privacy regulations such as GDPR or NIS2.
- CISSP, CISA, CISM, or CRISC; experience with GRC platforms such as Vanta or Drata; board or audit committee presentations.
Pay
$235,000 — $317,000 USD (base salary)
Tools
SOC 2, ISO 27001, FedRAMP, SOX ITGC, GDPR, NIS2, Vanta, Drata
AI focus
Build and evolve AI Governance, Risk and Compliance initiatives and implement compliance programs for AI-enabled products.
Model-written summary · the original posting is authoritative