Compliance Manager

The Compliance Manager at Figma is tasked with leading the design and implementation of IT General Controls (ITGCs) relating to our SaaS applications. This role encompasses monitoring access controls, change management, and data integrity, collaborating closely with internal and external audit teams to streamline testing and address any findings efficiently. You'll also be involved in developing policies and training to promote awareness among control owners.

To qualify for the Compliance Manager role at Figma, candidates should possess a minimum of 5 years of audit or assessment experience, particularly with SOX. A deep understanding of ITGC frameworks, along with strong organizational and communication skills, is crucial. Familiarity with cloud-based applications and corporate IT infrastructures is also beneficial, while certifications like CISA, CRISC, or CISSP are a plus.

Figma supports its Compliance Manager by fostering a collaborative work environment. You'll work directly with various teams across IT, engineering, and stakeholders to implement controls and tackle risks. Additionally, the company values personal growth and offers benefits such as learning stipends and flexible working arrangements to ensure you thrive in your role.

Figma seeks candidates for the Compliance Manager role who are not only experienced but are also passionate about compliance and security in the tech space. The ideal candidate should demonstrate effective communication abilities to convey complex ideas to diverse audiences and possess strong project management skills to juggle multiple tasks efficiently.

The annual base salary range for the Compliance Manager position at Figma, for those within the San Francisco and New York hub offices, is between $149,000 and $238,000 USD. Actual compensation is determined based on various factors, including qualifications and market demands, ensuring fair remuneration for your skills and experience.

In your response, highlight your specific experience with various ITGC frameworks, explaining how you've applied them in previous roles. Discuss any methods you've used to ensure compliance during audits and any notable achievements that demonstrate your expertise in this area.

Address this question by explaining your approach to managing audit findings. Share specific examples of how you communicated findings, coordinated remediation efforts, and tracked progress over time to strengthen compliance in your previous roles.

When answering, reflect on a particular project that required your leadership skills. Describe the objectives, the challenges you faced, and the outcomes that resulted from your management, highlighting the skills that made you successful.

Discuss the methodologies you utilize for risk assessments, such as qualitative vs. quantitative analysis, and any specific tools or frameworks you may have implemented. Be ready to mention any specific outcomes that strengthened compliance as a result.

Share the resources or networks you rely on to stay informed about the latest compliance regulations and best practices. This could include attending workshops, participating in professional groups, or following industry news outlets.

Express your insights into current compliance challenges, such as rapid technology changes or evolving regulations. Discuss how understanding these challenges drives your passion for compliance and enhances your effectiveness in your role.

Highlight strategies you've implemented previously to encourage a culture of compliance. This could include developing training programs, continuous communication with teams, or creating a framework for addressing compliance as an integral part of daily operations.

Discuss the importance of tailoring your communication to suit your audience. Share examples of how you've successfully simplified complex compliance concepts and ensured stakeholders understand their implications and responsibilities.

Detail your familiarity with any audit tools, governance, risk, and compliance (GRC) platforms, or automation technologies you've used. Highlight how these tools helped streamline compliance processes and improve efficiency.

Convey your enthusiasm for compliance by discussing what aspects of the role excite you, such as the challenges, the satisfaction of driving organizational improvements, or contributing to a culture of security and compliance.