Compliance Manager, Customer Trust & Third Party Risk Job at Figma (San Francisco)

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will contribute ...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

Master degree in Information Security, Cybersecurity, or a related field
5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels.

Job Responsibility

Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
Develop and implement risk mitigation strategies to address identified vulnerabilities
Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
Participate in audits as part of the Privacy audit program according to the agreed annual audit plan.

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products.

Fulltime

Senior Third-Party Security Risk Analyst

As a Senior Third-Party Security Risk Specialist at Ledger, you will play a vita...

Location

France , Paris

Salary:

Not provided

Ledger

Expiration Date

Until further notice

Requirements

Master degree in Information Security, Cybersecurity, or a related field
5+ years of progressive experience in third-party risk management, with a strong background in audit, risk management, compliance, or a related control function within a complex organization
Proven project management skills with the ability to manage complex, cross-functional projects and maintain comprehensive documentation
In-depth knowledge of security frameworks and standards (e.g., ISO 27001, NIST Cybersecurity Framework) and experience in applying them to third-party risk management and regulatory requirements
Excellent analytical and problem-solving skills with a focus on identifying root causes and developing effective solutions
Strong communication and interpersonal skills, including the ability to influence and negotiate with vendors and stakeholders at all levels

Job Responsibility

Conduct comprehensive security assessments of third-party vendors, including reviewing their security policies, procedures, and controls
Proactively identify and evaluate potential security/privacy risks associated with a particular focus on those that could impact Ledger's reputation, financial stability, and customer trust
Develop and implement risk mitigation strategies to address identified vulnerabilities
Lead the collaboration with vendors to remediate security gaps and ensure compliance with Ledger's stringent security requirements
Establish and maintain a robust vendor security monitoring program, driving continuous improvement in vendor security posture and compliance
Develop, implement, and continuously improve Ledger's third-party security risk management program, including policies, standards, procedures, and tools
Prepare reports and presentations on vendor security risks and mitigation efforts to senior management, stakeholders, and the Comex
Participate in audits as part of the Privacy audit program according to the agreed annual audit plan

What we offer

Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow
Flexibility: A hybrid work policy
Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks
Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage
Well-being: Personal development, coaching & fitness with our dedicated partners
Vacation: Five weeks of paid leave per year, in addition to national holidays and rest & relaxation (RTT) days
High tech: Access to high performance office equipment and gadgets
Transport: Ledger reimburses part of your preferred means of transportation
Discounts: Employee discount on all our products

Fulltime

Compliance Analyst

insightsoftware is seeking a detail-oriented and proactive Compliance Analyst to...

Location

United States , Remote

Salary:

Not provided

insightsoftware

Expiration Date

Until further notice

Requirements

Bachelor's degree in information security, Cybersecurity, Computer Science, Risk Management, Legal Studies, Business Administration, or related field
Minimum 3+ years of experience in compliance program management, risk management, or information security roles, preferably in regulated industries or technology companies
Demonstrated experience responding to third-party risk assessments, security audits, customer security questionnaires, RFPs, and compliance due diligence requests
Working knowledge of regulatory frameworks and standards (e.g., ISO 27001, SOC 2 (Type II), NIST, FedRAMP, CMMC, PCI DSS, GDPR, CCPA), trade control regulations (EAR, ITAR), anti-bribery/corruption laws (FCPA, UK Bribery Act), and data privacy principles
A strong knowledge of at least one regulatory framework governing matters pertaining to data privacy, cybersecurity, trade compliance, or third-party risk management
Experience with third-party screening tools and vendor risk management platforms
Familiarity with GRC or data protection management platforms (e.g., OneTrust, ServiceNowMetricStream)

Job Responsibility

Support the development, implementation, and maintenance of a global compliance program, including trade compliance, anti-bribery/corruption, anti-trust, and business ethics
Conduct secondary screening of third parties (vendors, partners, customers) , and assess potential matches against government watchlists of denied, debarred, sanctioned, or restricted parties to ensure compliance with applicable trade compliance, export control and sanctions regulations (e.g., U.S. Department of the Treasury Office of Foreign Assets Control ("OFAC"), U.S. Department of Commerce Bureau of Industry and Security ("BIS"), U.K. Office of Financial Sanctions Implementation ("OFSI"), European Union, and United Nations)
Assist with export classification determinations and licensing requirements for software products and services, including evaluation of Export Control Classification Numbers ("ECCNs")
Support the company's compliance with applicable data protection regulatory frameworks (e.g., GDPR, CCPA)
Support the Corporate Counsel, Data Privacy, AI, Cybersecurity with data protection initiatives and obligations including data mapping exercises, processing activity records, and privacy impact assessments, and coordinate responses to data subject access requests ("DSARs") and privacy-related inquiries
Support privacy management tools and platforms for consent management and privacy workflow automation
Partner with company counsel, InfoSec, and other stakeholders with compliance audits, data privacy questionnaires, and third-party risk assessment processes including vendor due diligence and ongoing monitoring
Support risk and control self-assessments ("RCSA"), audit management, and remediation tracking
Collaborate with stakeholders including the Chief Information Security Officer ("CISO") and the team to quantify, monitor, and report on security and compliance performance
Maintain GRC platforms (e.g., ServiceNow, Archer, MetricStream) to track compliance activities, risks, and controls

Director, GRC, Privacy, & Trust

We’re looking for an experienced security leader to grow and mature the Governan...

Location

United States; Canada

Salary:

258000.00 - 350000.00 USD / Year

1Password

Expiration Date

Until further notice

Requirements

8+ years leading GRC and privacy programs, including experience with international audits, risk management frameworks, and privacy regulations
5+ years experience managing individual contributors as well as experience managing other managers
Proven expertise in policy development, risk assessment, compliance monitoring, and privacy program management
Passion for fostering psychological safety and stability in complex compliance environments
Hands-on experience with various information security and privacy compliance frameworks such as SOC 2 Type II, ISO 27001, FedRAMP, CMMC, GDPR, and CPRA
Experience with security and privacy automation tools for compliance monitoring and knowledge management
Experience leading company-wide compliance initiatives, securing buy-in for security and privacy policies, and leading cross functional programs
Experience partnering on customer contracts, including security addendums and compliance terms, balancing customer expectations and business needs
Exceptional written and verbal communication skills with ability to communicate effectively with executives, legal counsel, and stakeholders
Experience managing third-party risk, vendor assessments, and external auditors

Job Responsibility

Lead and mentor the GRC and Privacy Engineering team, fostering career growth and high performance
Drive the organization's risk management strategy and oversee the implementation of risk assessment frameworks
Develop and maintain information security and privacy policies, ensuring regular reviews and updates
Establish strong partnerships across departments to align on security and compliance initiatives
Engaging with customers, in partnership with Sales and Legal, to represent security in RFPs, due diligence, and security assessments
Oversee 1Password’s various information security and privacy certification processes ensuring compliance with relevant frameworks and regulations
Monitor and report on compliance metrics and program effectiveness
Partner with legal and security teams to assess and mitigate business, technical, and regulatory risks
Oversee relationships with external auditors and consultants

What we offer

Maternity and parental leave top-up programs
Generous PTO policy
Four company-wide wellness days
Company equity for all full-time employees
Retirement matching program
Free 1Password account
Paid volunteer days
Employee-led inclusion and belonging programs and ERGs
Peer-to-peer recognition through Bonusly

Fulltime

Ethics & Compliance Manager

The Manager, Ethics & Compliance provides leadership and support for all element...

Location

United States , Alpharetta

Salary:

104000.00 - 121000.00 USD / Year

Avanos

Expiration Date

Until further notice

Requirements

Bachelor’s degree or its non-U.S. equivalent – required
4+ years of experience at a medical device, pharmaceutical, or other healthcare organization implementing a compliance program or other complementary job experience (such as roles within Internal Audit, Finance or Legal functions)
Expertise in Marketing or other fields will be considered upon demonstration of skill sets needed to perform the job duties
Experience in Healthcare industry – Device, Pharma, or Biotech is preferable
English language fluency required
Valued Advisor to business leaders with experience finding solutions to complex ethical issues
Excellent research, writing, and communication skills, and excellent ability to analyze complex matters and present them simply and clearly
Excellent organizational and time management skills with the ability to prioritize and manage a heavy and multi-directional workload
Demonstrates Integrity and commitment to the highest ethical standards and personal values
Ability to work independently and as part of a team (cooperative, encourages collaboration, builds consensus, easily gains the trust and support of superiors and peers, and finds common ground and solves problems)

Job Responsibility

Oversight: Supports the implementation of the Global Compliance Program under the direction of the Chief Ethics & Compliance Officer
Advice and Guidance: Provides day-to-day advice and guidance to relevant business teams on Ethics & Compliance matters
Risk Assessment Activities: Supports the annual Risk Assessment and reviews activity-specific plans by the business teams
Written Standards: Provides support on the drafting, implementation and communication of Compliance-related policies and procedures
Program Management: Implements actions as specified in the annual work plan and KPIs
Training and Communications: Supports the implementation of the annual training and education plans
Monitoring and Auditing: Supports the Audit, Monitoring and Investigations teams in activities as required
Third Party Management: Supports Third Party Seller and Non-seller Third Party (NSTP) compliance management and initiatives
Investigations: Conducts and/or assists in investigations to the extent requested
Corrective Actions: Implements and tracks appropriate and consistent corrective actions for identified compliance issues and assessment activities

What we offer

incentive compensation program
benefits on day 1
free onsite gym
onsite cafeteria
generous 401(k) employer match of 100% of each pretax dollar you contribute on the first 4% and 50% of the next 2% of pay contributed with immediate vesting
uncapped sales commissions

Fulltime

Security Analyst

As a Security Analyst focused on Governance, Risk, and Compliance (GRC), your co...

Location

Australia , Melbourne

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

1-3 years of operational experience in a role focused on Security Assurance, Third-Party Risk (TPR) Management, or GRC
Practical experience assisting with the management of security compliance programs (e.g., SOC 2, ISO 27001, or similar), including coordinating evidence collection from control owners and documenting attestations
Proven ability to manage and update content within a Security Trust Center platform (like SafeBase or similar), including document organization, access controls, and questionnaire response management
Practical understanding of the vendor security review lifecycle, including the ability to triage, assess, and document risk findings for internal and external suppliers
Excellent organization and prioritization skills with a proven track record of strong follow-through and working effectively toward defined service level agreements (SLAs) in a fast-paced environment
Clear and concise written communication, with the skill to translate complex security concepts (e.g., policy, controls) into practical, action-oriented guidance suitable for technical and non-technical internal teams
Familiarity with common security frameworks (e.g., SOC 2, ISO 27001, or similar) is a plus, and a high degree of curiosity, a learning mindset, and a positive, security-first attitude are essential

Job Responsibility

Complete security third-party vendor risk reviews for new and existing suppliers, gathering inputs, logging outcomes, and ensuring alignment with the Third-Party Security Management Standard in partnership with Procurement and Legal
Assist where required the timely completion of high-quality responses to customer and prospect security requests, due diligence questionnaires (DDQs), and information requests
Proactively assist and help maintain all security and compliance documentation, artifacts, policies, and certifications within our Security Trust Centre (e.g., SafeBase) to enable a self-service experience for customers
Partner with Sales and Legal to triage requests and ensure security communications are consistent and accelerate the sales cycle
Collect and track key performance indicators (KPIs) related to customer security review SLAs, document engagement, and overall security assurance efforts for leadership visibility
Assist with the design, coordination, and delivery of our hybrid cybersecurity awareness program
Draft and schedule compelling security insights for internal newsletters, Slack, and email, translating complex policy and control requirements into clear, action-oriented guidance for all employees ("Campers")
Support the operationalisation of the security champions program across business units to extend program reach and reinforce secure-by-default behaviours across the organization
Assist the GRC team with the ongoing management and maintenance of our key security compliance programs (e.g., ISO 27001, SOC 2), which includes coordinating evidence collection, documentation updates, and control attestations

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget to spend on setting up your home office

Associate Director, Investigations

The Associate Director, Investigations provides senior leadership and advanced s...

Location

United States , Alpharetta

Salary:

154000.00 - 180000.00 USD / Year

Avanos

Expiration Date

Until further notice

Requirements

Bachelor’s degree or its non-U.S. equivalent – required
Advanced degree, including MBA, JD, or equivalent - required
7+ years of experience at a medical device, pharmaceutical, or other healthcare organization implementing a compliance program or other complementary job experience (such as roles within Internal Audit, Finance or Legal functions)
Expertise in Marketing or other fields will be considered upon demonstration of skill sets needed to perform the job duties
Experience in Healthcare industry – Device, Pharma, or Biotech is preferable
English language fluency required
Valued Advisor to business leaders with experience finding solutions to complex ethical issues
Excellent research, writing, and communication skills, and excellent ability to analyze complex matters and present them simply and clearly
Excellent organizational and time management skills with the ability to prioritize and manage a heavy and multi-directional workload
Demonstrates Integrity and commitment to the highest ethical standards and personal values

Job Responsibility

Oversight: Supports the implementation of the Global Compliance Program under the direction of the Chief Ethics & Compliance Officer
Risk Assessment Activities: Supports the annual Risk Assessment and reviews activity-specific plans by the business teams
Third Party Management: Leads the Third Party Seller and Non-seller Third Party (NSTP) compliance management and initiatives
Investigations: Leads the investigations into Ethics & Compliance related issues, allegations, or identified areas of risk
Helpline: Owns the helpline vendor relationship and managements the system, data flows and communications with internal and external stakeholders
Corrective Actions: Implements and tracks appropriate and consistent corrective actions for identified compliance issues and assessment activities
Written Standards: Provides support on the drafting, implementation and communication of Compliance-related policies and procedures
Program Management: Implements actions as specified in the annual work plan and KPIs
Training and Communications: Supports the implementation of the annual training and education plans
Monitoring and Auditing: Supports the Audit, Monitoring and Investigations teams in activities as required

What we offer

benefits on day 1
free onsite gym
onsite cafeteria
HQ region voted 'best place to live' by USA Today
uncapped sales commissions
generous 401(k) employer match of 100% of each pretax dollar you contribute on the first 4% and 50% of the next 2% of pay contributed with immediate vesting
attractive incentive compensation program

Fulltime

Global Data Privacy Counsel

We are looking for a senior attorney with extensive experience in global data pr...

Location

United States , Atlanta

Salary:

Not provided

Arrive

Expiration Date

Until further notice

Requirements

Juris Doctor degree from a reputable, accredited U.S. law school
Active license in good standing with one or more U.S. state bars (Georgia preferred)
10+ years of progressive experience in data privacy and cybersecurity legal matters, with significant in-house experience at a high-growth, technology-driven company
Deep expertise and knowledge of and hands-on experience with U.S. and international data privacy, cybersecurity, and compliance laws and frameworks (including GDPR, CCPA/CPRA, PCI-DSS, ISO certifications, and other relevant global standards) and leading-edge AI regulations and frameworks
Demonstrated success in providing strategic legal counsel that balances risk management with enabling innovation and business growth, particularly in payments and data-driven initiatives
Proven experience leading global privacy and data protection programs, including managing privacy and data protection risk frameworks and governance
Experience managing external counsel, auditors, and regulators
Proven ability to lead, develop, and inspire diverse, global teams, including direct leadership experience with Data Protection Officers and other privacy professionals
Strong business acumen with the ability to translate complex legal concepts into clear, actionable advice that aligns with business objectives and supports deal-making and sales acceleration
Excellent communication and interpersonal skills, with the ability to influence stakeholders at all levels, including senior executives and cross-functional teams globally

Job Responsibility

Serve as a trusted strategic legal advisor to executive leadership, business unit and function heads, and the governance committees on global privacy, data protection, and cybersecurity risks, as well as opportunities aligned with rapid business growth and innovation
Design, lead, and continuously evolve the global privacy and data protection program, ensuring it not only meets regulatory requirements but also supports scalable growth and competitive advantage in a fast-paced, high-growth environment
Partner closely with product, technology, payments, data, software and hardware sales, marketing, and strategy teams to embed privacy-by-design and data governance principles into all data-driven and payment-related initiatives
Advise on privacy, data protection, cross-border data processing, and emerging technologies (AI and machine learning), in connection with parking, public transport and other urban mobility technologies and data services (B2B, B2C), to help the company navigate these complex regulatory environments while accelerating innovation
Balance risk management with enabling agility—help business units achieve their ambitious growth objectives without compromising compliance or customer trust
Lead and manage a global, unified privacy and data protection team, including the EU Data Protection Officer and EU Privacy Program Manager, and serve as the global privacy and data protection leader responsible for harmonizing privacy and data protection practices across all regions
Act as the company’s U.S. and Canada Privacy Officer, overseeing all U.S.-specific and Canada-specific aspects of the global privacy and data protection program
Own enterprise-wide development, implementation, and continuous improvement of privacy and data protection policies, standards, and frameworks aligned with relevant global privacy and data protection-related regulations
Develop and maintain a privacy and data protection risk management framework and a dashboard of key privacy metrics to inform leadership decision making and monitor program effectiveness in a high-growth environment
Lead privacy and data protection audits and program assessments to ensure compliance and identify areas for improvement aligned with rapid company growth

Compliance Manager, Customer Trust & Third Party Risk

Figma

Location:
United States , San Francisco ▼
New York
Seattle

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
January 05, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Compliance Manager, Customer Trust & Third Party Risk

Senior Third-Party Security Risk Analyst

Senior Third-Party Security Risk Analyst

Compliance Analyst

Director, GRC, Privacy, & Trust

Ethics & Compliance Manager

Security Analyst

Associate Director, Investigations

Global Data Privacy Counsel

Compliance Manager, Customer Trust & Third Party Risk

Figma

Location:United States , San Francisco ▼New YorkSeattle

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:January 05, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Compliance Manager, Customer Trust & Third Party Risk

Senior Third-Party Security Risk Analyst

Senior Third-Party Security Risk Analyst

Compliance Analyst

Director, GRC, Privacy, & Trust

Ethics & Compliance Manager

Security Analyst

Associate Director, Investigations

Global Data Privacy Counsel

Location:
United States , San Francisco ▼
New York
Seattle

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
January 05, 2026