Compliance Engineer

About this role

As a Compliance Engineer at Figma, you'll design, implement, and test security controls across multiple compliance frameworks, collaborating with various teams. You'll leverage automation and AI-assisted tools to enhance compliance engineering practices and ensure effective security measures across the organization.

About the company

Figma is a collaborative design platform for product teams to create interfaces, prototypes, and design systems in the browser. It helps designers and developers work together on digital products from ideation through handoff.

What you'll do

• Develop and verify technical security controls for compliance frameworks
• Collaborate with engineering teams to implement compliance requirements
• Design and execute testing procedures to assess control performance
• Establish repeatable control assessments and continuous monitoring
• Translate security requirements into machine-readable JSON definitions
• Build and maintain API integrations and automated workflows
• Identify opportunities to enhance control effectiveness

What we're looking for

• 5+ years of experience in security compliance or related fields
• Experience with compliance frameworks like FedRAMP, SOC 2, ISO 27001
• Testing security controls for design and operating performance
• Understanding of cloud security concepts
• Experience with JSON, REST APIs, and automation

Nice to have

• Experience with JSON-based control definitions and REST API integrations
• Familiarity with Open Security Controls Assessment Language (OSCAL)
• Proficiency in Python or similar scripting languages
• Experience using Git and version control

Benefits

• Equity for employees
• Health, dental, and vision coverage
• Retirement benefits
• Parental leave support
• Mental health and wellness benefits
• Paid time off