[Hiring] IT Audit Manager @Figma

Role Description

This is a unique opportunity to contribute to a high-quality SOX program while helping create something from the ground up: an IT risk management function and operational audit capability at one of the most recognized design companies in the world. The Manager of IT Internal Audit (Risk & Ops) will support Figma's IT SOX compliance program and, in partnership with the Head of Internal Audit, develop the IT risk management and risk-based operational audit workstreams. The right candidate brings compliance rigor and the intellectual curiosity to work in greenfield territory, where the playbook does not yet exist.

This is a full-time role that can be held from one of our US hubs or remotely in the United States.

What you’ll do at Figma:

• Execute the IT SOX compliance program: ITGC and ITAC testing, deficiency management, remediation tracking, and SOX documentation.
• Coordinate with external auditors and co-sourced resources throughout the audit cycle.
• Provide technical support in the assessment, design, and implementation of IT General Controls and IT Application Controls in collaboration with GRC and IT management.
• Participate in system upgrades and implementations to ensure controls over financial reporting are adequately identified and addressed.
• Lead IT risk conversations with management and contribute to the IT risk register.
• Support the buildout of Figma's IT risk management program, including risk identification methodology, assessment frameworks, and leadership reporting.
• Contribute to risk updates for the Audit Committee and senior leadership as it relates to the IT risk landscape, including emerging technology risks such as cloud, SaaS, and AI.
• Develop a risk-based operational audit plan and implement audits across IT and business process areas, including where no prior year workpapers exist.
• Issue findings with risk ratings and actionable recommendations; track remediation to closure.
• Build audit programs from scratch, prepare clear and concise audit reports, and present findings and recommendations to senior leaders and cross-functional partners.

Qualifications

• 6+ years in IT audit, IT risk management, or a combination thereof.
• IT SOX compliance experience with hands-on ownership of ITGCs, ITACs, and Segregation of Duties.
• Experience performing operational or integrated audits, including in environments without established playbooks.
• Knowledge of PCAOB/SEC requirements and audit frameworks, including CISA, CIA, or CISM certifications.
• Ability to collaborate across Internal Audit and cross-functional teams (GRC, IT, Finance, Legal, Business Systems).

Requirements

• While not required, it’s an added plus if you also have:
• Experience supporting the development of a risk management program.
• SaaS or fast-paced tech company experience.
• Familiarity with GRC tools (AuditBoard, Workiva, ServiceNow GRC, or similar).
• Experience with data analytics tools (ACL, IDEA, or similar) for audit processes.
• Cloud security knowledge and audit experience.

Benefits

• Figma offers equity to employees, as well a competitive package of additional benefits, including:
• Health, dental & vision.
• Retirement with company contribution.
• Parental leave & reproductive or family planning support.
• Mental health & wellness benefits.
• Generous PTO.
• Company recharge days.
• Learning & development stipend.
• Work from home stipend.
• Cell phone reimbursement.
• Sales incentive pay for most sales roles and an annual bonus plan for eligible non-sales roles.