Fast Facts

Figma is seeking a Director of Legal for Privacy, Data, and AI Governance to lead its legal privacy and data function, focusing on compliance with privacy laws and regulations globally. This full-time role involves managing a dedicated team and collaborating with various departments to implement effective privacy strategies and policies.

Responsibilities: Oversee Figma's privacy and data protection initiatives, manage the legal privacy team, and develop compliance strategies in line with global regulations. Collaborate with engineering and legal teams to enhance privacy policies and advise on data-related issues, especially concerning AI governance.

Skills: Expertise in US and global privacy laws, such as GDPR and CCPA; experience managing legal teams; ability to translate legal concepts for non-legal audiences; and strong organizational skills in a fast-paced environment.

Qualifications: J.D. degree and 10+ years of legal practice experience with a focus on privacy law; at least 6 years specializing in this field; and proven management experience.

Location: This position is available remotely within the United States or from the US hubs in San Francisco and New York.

Compensation: Not provided by employer. Typical compensation ranges for this position are between $200,000 - $300,000.

Figma’s Legal Team is looking for our first full time privacy and data security lawyer who will lead and build out a centralized Legal Privacy and Data function, which currently consists of two privacy program managers.  

You will report to the Legal VP of Product, Privacy, Marketing and IP, and will lead and develop the Figma Privacy and Data Legal team to work collaboratively with legal colleagues and business, security, and engineering partners to ensure that our practices are consistent with privacy and data regulations globally, including emerging AI laws, and our contractual obligations around privacy and data usage. We are looking for a highly adaptable and collaborative person who can handle ambiguity and rapidly shifting priorities with flexibility and creativity. 

This is a full time role that can be held from one of our US hubs or remotely in the United States.

What you’ll do at Figma:

• Serve as lead attorney for Figma on domestic and international privacy, data protection, and data use (including AI governance)
• Manage, empower, and develop the members of Figma’s privacy legal team 
• Develop and be responsible for (in partnership with our international Legal team) implementation of privacy strategies and policies in compliance with international, federal and state privacy and consumer protection laws (e.g., GDPR, CCPA/CPRA, GLBA), and ensure that our policies and practices keep pace with regulatory changes and industry standard processes
• Lead our Legal team on AI Governance best practices relating to data use in AI, as well as implementing policies to keep us in compliance with emerging AI laws 
• Establish regulatory response strategies for privacy and data protection
• Collaborate with legal colleagues, engineering, security, IT, and operational teams to develop, enhance and implement Figma's privacy program and data protection policies and procedures globally
• Partner with Product legal team to advise product teams in evaluating the impact of privacy and data protection laws, regulatory guidance and enforcement actions, and other related guidelines on product features
• Partner with the Commercial, International, and Employment legal teams to ensure appropriate privacy and data protection provisions are incorporated into customer, vendor, partner and employee agreements
• Draft and supervise the development and management of Figma’s internal and external data policies, draft and update privacy policies, template data protection agreements and other foundational resources to promote compliance with evolving global regulatory requirements

We'd love to hear from you if you have:

• J.D. degree from an ABA accredited law school (or foreign equivalent)
• Membership in at least 1 U.S. State Bar, with good standing
• 10+ years of legal practice experience, with at least 6+ years specializing in US and global privacy law, including current expertise in GDPR, UK GDPR, PIPEDA, PIPL, LGPD, CCPA/CPRA, and new and emerging US state laws
• 4+ years of proven experience managing, inspiring, and growing high performing teams
• Experience balancing both doing and delegating, where no task is too small to personally handle, and no challenge is too big for your team to tackle
• Demonstrated expertise building and scaling compliant privacy programs in a technology-first and risk-based way
• Experience with technology companies, including some experience with intersection of data and privacy issues in the use of AI technology
• Ability to thrive in a fast-paced environment, and to tolerate change and ambiguity
• Demonstrated expertise building and scaling compliant privacy programs in a technology-first and risk-based way
• Ability to translate sophisticated legal concepts to into practical and actionable advice for a non-legal audience

While not required, it’s an added plus if you also have:

• You have one or more of the following IAPP certifications: CIPP/US, CIPP/E, CIPP/A, CIPP/C
• You have one or more cybersecurity or AI certifications

At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.