Listing Description

As a Security Compliance Analyst at Figma, you will help the Manager of Commercial Security Compliance oversee and manage the audit certification lifecycles for current and future compliance initiatives. You'll help drive our certification roadmaps based on customer requirements while ensuring committed assessments are delivered on schedule. This is a superb opportunity to drive efficiencies, reduce process friction, and strategically scale our compliance programs to support a hyper growth company.

What you’ll do at Figma:

• Maintain existing Security Compliance Certifications and Frameworks (i.e. SOC 2 Type II, ISO 27001)


• Serve as a subject matter expert for applicable compliance standards and be a valued partner to the business and engineering teams in the implementation of the standards


• Gap assess new in-scope tools and new hosting regions/environments against existing controls and processes


• Help drive and improve Annual Operational Activities (i.e. Quarterly Privileged User Access Reviews)


• Implement and mature controls that scale and do not burden teams


• Refine Figma’s Common Control Framework through control rationalization efforts


• Configure compliance automation tooling to help achieve continuous monitoring and automated evidence collection for external audits


• Communicate progress, escalations, and issue resolution to management and team stakeholders


• Align changes made to existing controls and processes to the Information Security and Data Privacy Policies