Strategic Program Manager, Information Security
Figma- Base salary
- $169k–$296k Published base salary range
- Location
- Remote - US Remote eligibility
- Employment
- Full-time Mid-level
About the job
Figma is a design collaboration platform that helps teams bring ideas to life. The Information Security team is seeking a Strategic Program Manager to drive strategic initiatives and engagement across the organization.
Responsibilities
- Lead strategic security programs from planning through execution, coordinating priorities, dependencies, risks, and accountability.
- Partner with teams to identify and address security risks, align stakeholders, and translate security priorities into action plans.
- Define and track security program metrics, OKRs, risk registers, and reporting.
- Coordinate remediation of security gaps with control owners and stakeholders.
- Design and implement scalable security practices, including policies, processes, and change management.
- Drive security awareness and engagement through training and communications.
- Support security leadership with strategic planning and portfolio management.
Qualifications
- 5+ years of experience in security program management or related strategic role.
- Experience leading complex cross-functional security programs, including metrics, OKRs, risk registers.
- Working knowledge of information security frameworks such as NIST CSF, SOC 2, ISO 27001.
- Ability to communicate security risks to technical and non-technical stakeholders.
- Experience developing security initiatives that drive adoption.
Nice-to-have: chief of staff experience, FAIR, public company compliance (SOX ITGC, GDPR, NIS2), AI/automation, security certifications (CISA, CISSP, CISM, CRISC).
Compensation: Annual base salary range $169,000—$296,000 USD.
Benefits: Equity, health/dental/vision coverage, retirement benefits with company contributions, parental leave, mental health and wellness benefits, paid flexible PTO, annual bonus plan, paid holidays, fertility benefits.
Location: This is a full-time role that can be held from one of our US hubs or remotely in the United States.
Skills & tags
Compare the essentials before you leave: pay, remote scope, employment type, source, and the employer apply destination.