Director, Governance Risk & Compliance

About this role

Figma is seeking a Governance, Risk, and Compliance Director to lead their GRC team and manage Figma's security compliance and risk management strategies. The role involves building risk and controls frameworks and representing GRC to various stakeholders, including executives and regulators.

About the company

Figma is a collaborative design platform for product teams to create interfaces, prototypes, and design systems in the browser. It helps designers and developers work together on digital products from ideation through handoff.

What you'll do

• Set strategy and roadmap for the GRC program
• Own certification and compliance portfolio
• Lead and grow a team of compliance professionals
• Build and evolve enterprise risk and controls frameworks
• Manage relationships with external auditors and regulators
• Direct GRC platforms selection and lifecycle management
• Partner with Sales and Legal on security communications
• Scale enterprise risk reporting and program health

What we're looking for

• 10+ years in information security, compliance, or risk management
• 4+ years leading a GRC or compliance team
• Experience with SOC 2 and ISO 27001 frameworks
• Track record of building GRC programs in high-growth stages
• Excellent communication skills to engage executives and stakeholders
• Experience with cloud technologies and their GRC implications

Nice to have

• FedRAMP authorization support
• Experience with global privacy regulations
• Security or risk certifications like CISSP or CISA
• Hands-on experience with GRC platforms like Vanta
• Experience presenting to boards or audit committees

Benefits

• Equity options
• Health, dental, and vision coverage
• Parental leave and family planning support
• Mental health and wellness benefits
• Paid time off and flexible PTO