Governance Risk Compliance Director

Job Summary

Leading the Governance, Risk and Compliance team, the full-time Governance Risk Compliance Director will manage Figma's security compliance, risk management, and governance strategy while overseeing a team of GRC professionals, with the flexibility to work remotely in the United States.

Key responsibilities

• Set the strategy and roadmap for Figma's GRC program, aligning priorities with company objectives
• Own the certification and compliance portfolio, including SOC 2, ISO 27001, and GDPR, while expanding coverage as the company grows
• Lead and develop a team of compliance, risk, and governance professionals, fostering a culture of rigor and pragmatism

Required qualifications

• 10+ years of experience in information security, compliance, or risk management, with at least 4 years in a leadership role
• Hands-on experience with frameworks such as SOC 2 and ISO 27001, including managing multiple audit cycles
• Proven track record of building or scaling GRC programs, ideally within a SaaS or platform company
• Exceptional written and verbal communication skills, with the ability to translate technical risk into business terms
• Experience implementing compliance programs for emerging products, particularly in cloud-based technologies