# Strategic Program Manager, Information Security

**Company:** [Figma](https://hotfix.jobs/companies/figma)
**Location:** Remote
**Role:** Technical Program Management
**Salary:** $169k – $296k/yr
**Experience:** 5+ years
**Skills:** Information Security, Security Program Management, Nist Csf, SOC 2, ISO 27001, Risk Management, Okrs, Risk Registers, Change Management, Security Awareness, Fair, Sox Itgc, GDPR, Nis2, Cissp
**Posted:** 2026-08-19

> Leads cross-functional information security programs, risk remediation, metrics, governance, and organizational engagement while partnering with security leadership and business stakeholders. Requires 5+ years of security program management experience and familiarity with major security frameworks and risk practices.

## Job Description

## Responsibilities
- Lead strategic security programs from planning through execution, coordinating priorities, dependencies, risks, and accountability across security and business teams.
- Partner with teams across Figma to identify and address security risks, align stakeholders, and translate security priorities into practical guidance and action plans.
- Define and track security program metrics, OKRs, risk registers, and reporting for leadership visibility into program health, priorities, and risk posture.
- Coordinate remediation of security gaps with control owners, security specialists, and business stakeholders.
- Design and implement scalable security practices, including policies, processes, operating models, and change management plans.
- Drive security awareness and engagement through company-wide training, communications, and educational initiatives.
- Support security leadership with strategic planning and portfolio management, leadership briefings, decision coordination, and follow-through.

## Requirements
- 5+ years of experience in security program management, security business partnership, or a related strategic information security role.
- Experience leading complex, cross-functional security programs and developing program metrics, OKRs, risk registers, or dashboards.
- Working knowledge of information security frameworks such as NIST CSF, SOC 2, or ISO 27001.
- Ability to communicate security risks, priorities, and tradeoffs to technical and non-technical stakeholders, including senior leaders.
- Experience developing or delivering security awareness, training, risk remediation, or change management initiatives.

## Nice-to-haves
- Experience supporting security or technical leadership in a chief of staff, business operations, or portfolio management capacity.
- Knowledge of enterprise or quantitative risk management, including FAIR.
- Experience with SOX ITGC, GDPR, NIS2, or other global regulatory frameworks.
- Experience using AI, automation, or security tooling to improve reporting, workflows, or decision-making.
- Security certifications such as CISA, CISSP, CISM, or CRISC.

## Compensation and Benefits
- Annual base salary range: **$169,000–$296,000 USD**.
- Equity and benefits including health, dental, and vision coverage; retirement contributions; parental and family-planning support; mental health and wellness benefits; paid time off; paid sick leave; holidays; and an annual bonus plan for eligible non-sales roles.
- Additional benefits may include recharge days, cell phone and home internet reimbursements, and lifestyle spending accounts.

## Similar jobs

- [Agent Standards Specialist, Global Affairs](https://hotfix.jobs/jobs/cbb4dc15-bc38-4b0d-8f26-e01b3a7b6a20) - OpenAI - Washington, DC - $171k – $280k/yr
- [Subcontracts Manager, Public Sector](https://hotfix.jobs/jobs/49edfe67-9116-416a-b30c-694580ba380d) - Scale AI - Washington, DC - $166k – $249k/yr
- [Technical Program Manager , Public Sector](https://hotfix.jobs/jobs/b90a1f19-c6fe-4f75-8c3c-9f1d20aedc1f) - Scale AI - Colorado Springs, CO - $166k – $249k/yr
- [Technical Program Manager, Model Performance](https://hotfix.jobs/jobs/4eba1155-9918-4c04-abdc-6d885ac09c73) - Baseten - San Francisco, CA - $165k – $330k/yr
- [Technical Program Manager, Infrastructure](https://hotfix.jobs/jobs/c5fe5786-5ed5-4ce1-901f-061c911f5433) - Stripe - Remote - $173k – $260k/yr

**Apply:** https://hotfix.jobs/jobs/71e86429-b6ca-421f-9433-25f3ff31e2f1
**Canonical:** https://hotfix.jobs/jobs/71e86429-b6ca-421f-9433-25f3ff31e2f1