2 hours ago
Base Salary
$169k - $296k/yr
Responsibilities
- Develop and verify technical security controls supporting FedRAMP, SOC 2, ISO 27001, and NIST requirements.
- Collaborate with security, infrastructure, and product engineering teams to implement compliance requirements as technical controls.
- Design and execute control testing procedures, identify gaps, and confirm remediation.
- Establish repeatable control assessments and continuous monitoring processes.
- Create machine-readable JSON control definitions and build API integrations and automated workflows for evidence collection and validation.
- Improve control effectiveness, reduce manual effort, and scale compliance operations across multiple frameworks.
Requirements
- 5+ years of hands-on experience in security compliance, security assurance, IT audit, or compliance engineering.
- Experience designing, implementing, and testing technical security controls for FedRAMP, SOC 2, ISO 27001, and NIST 800-53 in SaaS or cloud environments.
- Experience evaluating control design and operating performance, identifying gaps, and confirming fixes.
- Understanding of cloud security concepts including identity and access management, vulnerability management, logging, and security configurations.
- Experience working with engineering teams to implement compliance requirements as technical solutions.
- Experience with JSON, REST APIs, and automation.
- Preferred experience with JSON-based control definitions, JSON Schema, OSCAL, Python or similar scripting languages, compliance automation platforms, automated evidence collection, Git, version control, collaborative development workflows, and AWS.
Benefits
- Full-time role available from a US hub or remotely in the United States.
- Health, dental, and vision coverage; retirement benefits with company contributions; parental leave; reproductive and family planning support; mental health and wellness benefits; and paid time off.
- Paid sick leave, holidays, flexible PTO for eligible exempt employees, and other legally required leave benefits.
- Potential company recharge days, cell phone and home internet reimbursements, and lifestyle spending accounts.
- Annual bonus plan for eligible non-sales roles and equity offerings.
- In-person onboarding is required, and cameras must be on during video interviews.
About Figma
Figma builds a browser-based platform for interface design, prototyping, whiteboarding, and developer handoff used by product, design, and engineering teams. Its main products—Figma Design and FigJam—are sold as SaaS with tiered subscriptions for individuals, teams, and enterprises, plus an ecosystem of plugins and integrations. Founded in 2012 and headquartered in San Francisco, the company is privately held and enables real-time collaboration on the web and desktop apps.