Director, Governance Risk & Compliance
Core
Lead Figma's Governance, Risk, and Compliance (GRC) program to build trust with users, regulators, and partners by managing security compliance, risk frameworks, and audit readiness.
Role type
Director, Governance Risk & Compliance (Strategy & Team Leadership)
Builds
Enterprise risk and controls frameworks, GRC certification portfolio, and team capabilities
Domain
SaaS / Platform Security & Compliance
Required skills
GRC strategy, risk management, team leadership, audit cycle management, regulatory compliance, cross-functional partnership, executive communication, AI governance, cloud technology understanding
Preferred skills
FedRAMP authorization, global privacy regulations (GDPR/NIS2), security certifications (CISSP/CISA/CISM/CRISC), GRC platform implementation (Vanta/Drata), board presentation
Technologies
SOC 2, ISO 27001, FedRAMP, SOX ITGC, GDPR, Vanta, Drata
Responsibilities
Set strategy and roadmap for GRC program, own certification portfolio (SOC 2, ISO 27001, FedRAMP, SOX, GDPR), lead and grow GRC team, build enterprise risk frameworks including AI initiatives, manage external auditor and regulator relationships, direct GRC platform selection and policy lifecycle, partner on security questionnaires and contracts, scale risk reporting to executive/board levels
Seniority
Director, strategic leadership with hands-on program ownership
