We are looking for a Security TPM to join the Security & Privacy team at Figure, focusing on governance and compliance workflows, and development of our overall security program.
Responsibilities- Support a team of highly talented security and privacy engineers, fostering growth, innovation, and collaboration
- Set the vision for data and access governance, ensuring alignment with Figure's business objectives
- Develop the security & privacy program at Figure, and work with teams across the company to implement necessary controls
- Ensure that security, privacy and data protection principles are seamlessly integrated into Figure's products, services, and operations, while aligning with organizational goals and regulatory requirements
- Establish and enforce data governance policies and frameworks to ensure data integrity, security, and compliance
- Review security & privacy requirements for relevant industry standards and support certification efforts, including SOC, NIST, ISO, and more
Requirements- Ability to build and drive programs affecting all parts of a business
- Ability to effectively advocate for and influence strategic initiatives at the company level
- Experience collaborating with internal and external senior stakeholders at the company
- Strong technical grasp of security & privacy fundamentals, including enterprise controls, SDLC, machine learning, cryptography, data protection, network security, and more.
- Experience navigating global privacy compliance programs (GDPR, CCPA, DSA, etc.)
- Experience navigating industry certification, such as SOC-2, NIST, ISO 27001, ISO/TR 22100-4, IEC/TR 63074
- Bachelors in a technical field such as Computer Science or equivalent experience
- 8+ years of experience leading teams and large scale programs
The US base salary range for this full-time position is between $150,000 - $350,000 annually.
The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.
