Governance, Risk & Compliance Lead, FIGS
$129.5-185k
Office located in Santa Monica, CA
Medical uniforms & clothing
Job no longer available
Medical uniforms & clothing
201-500 employees
Job no longer available
$129.5-185k
Office located in Santa Monica, CA
201-500 employees
Company mission
To celebrate, empower and serve those who serve others.
Role
Who you are
- 10+ years of experience within cyber security governance, risk and compliance
- Working knowledge of the broader governance, risk and compliance landscape
- Experience working with third parties to assess risk and compliance with internal and regulatory standards
- Strong analytical and organizational skills that would include hands-on experience with GRC and reporting tools
- In-depth knowledge of and experience with writing and obtaining third party attestations (either SOC2 reports or ISO27001 certifications)
- Minimum of 5 years working with auditors and ensuring compliance with Sarbanes-Oxley Act
- Prior knowledge of and experience with risk frameworks
- Prior experience with documenting, assessing and changing controls to achieve compliance
- Prior experience in conducting a Business Impact Analysis
- Prior experience in documenting Business Continuity and Disaster Recovery Plans
- Any security or risk-focused certifications (e.g. CISSP, GSEC, CCSK, CCSP, CCSE, CISM, CISA, ARM, CRMP, PMI-RMP, CRISC, CIPP, CIPM, CIPT, etc)
- Bonus points if you can calculate risk
- Proven work ethic and integrity
- Positive attitude and willingness to teach others how they like to be taught
- Desire to excel, learn, and grow with FIGS
- Aspiration to create change and make an immediate impact
- Entrepreneurial spirit and egoless nature
What the job involves
- Maintain cyber security document governance including all policies, standards and procedures
- Work daily on creating/maintaining risk register, risk assessments and risk mitigation plans for cyber security with the goal of reducing the impact and likelihood of cyber security risks
- Work with other areas of the business to understand and, sometimes, own cyber risk and mitigations for cyber risk
- Work with Finance and Legal to create a third-party risk program
- Ensure Cyber risk is in line with Enterprise Risk Mgt and insurance
- Coordinate with Internal Audit department, external auditors and internal control owners to track and perform controls related to cyber security pursuant to SOX and PCI (and others in the future) compliance
- Work with Data Team to setup data classification, retention limits, destruction controls
- Contribute to DLP program based on data standards
- In this role, you will report directly to the Director of Cyber Security
Our take
FIGS is a medical apparel brand dedicated to providing durable, comfortable, and stylish products for healthcare professionals. Operating on a direct-to-consumer model, FIGS ensures a streamlined connection with its audience.
FIGS' unique selling proposition lies in its Technical Comfort™, featured across a range of antimicrobial, elastic scrubs and uniforms designed with functional pockets. Inspired by the founders personal connection to the challenges faced by healthcare workers, the brand was created to address the discomfort of traditional uniforms and the long, demanding hours common in the profession.
More recently, FIGS has begun executing a strategic shift focused on long-term brand equity rather than short-term promotional growth. In 2024, the company signaled a move away from heavy discounting, instead increasing investment in brand building, international expansion, and new growth channels such as retail and institutional sales through its TEAMS program. While overall revenue growth has remained modest, international sales have grown rapidly, highlighting Asia as a key opportunity for future expansion. And in an increasingly competitive and promotion-driven market, FIGS' emphasis on premium positioning, disciplined pricing, and global brand development reflects a calculated bet on sustainable growth rather than volume-led gains.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
21% employee growth in 12 months
Company
Funding (last 2 of 3 rounds)
Jan 2018
$65m
SERIES B
May 2016
$5m
SERIES A
Total funding: $72m
Company benefits
- Health and Wellbeing: Comprehensive benefits and perks package focused on your well-being including: previum medical, dental, and vision coverage, FIGS-sponsored bi-weekly UberEats meal credits, free access to Breethe, a fitness stipend with ClassPass, and a free Peleton room on-site.
- Finance: Amazing 401(k) progream, with a company match up to the first 6% of your contribution. 100% FIGS-sponsored life insurance, disability insurance, access to an Employee Stock Purchase Plan and financial wellness learning opportunities.
- Family: We care for our extended FIGS family by offering generous parental leave, new-parent care meals, and a transition back to work program following leave.
- Time Away: Generous time off - flexible vacation for salaried team members and up to 3 weeks of vacation for hourly team members. We also offer access to leave programs to care for yourself and your family.
- Staying Connected: Weekly company-wide meetings, exclusive Coffee Connection meetings with the FIGS Co-CEOs, and monthly Fruitful Talks with thought-leaders and industry experts. WE support our team members through affinity groups and a thoughtfully designed Buddy Program, fostering friendship and belonging.
- Culture Committee: The Culture Committee creates incredible monthly Culture Programs spotlighting a specific area of wellness, while also finding ways to give back to the local community through volunteerism.
- Furry Friends: We partner with The Wags Club in West LA to provide weekday doggy day care at a partially subsidized cost. We also partner with MetLife to get discounts on pet insurance.
- Employee Discounts & Rewards: Team members receive 50% off, a $75 gift code on birthdays, and a special anniversary gift each year.
Company HQ
Santa Monica, CA
Leadership
Heather Hasson
(Co-Founder & Executive Chairman)Heather studied at the University of Wisconsin-Madison before co-founding FIGS in 2010. She then spent a year at Saïd Business School, and has been a RxArt Board Member since 2019.
Trina Spear
(Co-Founder & CEO)Trina began her career with 4 years at Citi, before working as an Associate at The Blackstone Group for a year. She then co-founded FIGS with Heather in 2010, and has been serving as CEO since.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at FIGS