Director, Legal for Privacy, Data and AI Governance

Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us!

Figma’s Legal Team is looking for our first full time privacy and data security lawyer who will lead and build out a centralized Legal Privacy and Data function, which currently consists of two privacy program managers.  

You will report to the Legal VP of Product, Privacy, Marketing and IP, and will lead and develop the Figma Privacy and Data Legal team to work collaboratively with legal colleagues and business, security, and engineering partners to ensure that our practices are consistent with privacy and data regulations globally, including emerging AI laws, and our contractual obligations around privacy and data usage. We are looking for a highly adaptable and collaborative person who can handle ambiguity and rapidly shifting priorities with flexibility and creativity. 

This is a full time role that can be held from one of our US hubs or remotely in the United States.

What you’ll do at Figma:

• Serve as lead attorney for Figma on domestic and international privacy, data protection, and data use (including AI governance)
• Manage, empower, and develop the members of Figma’s privacy legal team 
• Develop and be responsible for (in partnership with our international Legal team) implementation of privacy strategies and policies in compliance with international, federal and state privacy and consumer protection laws (e.g., GDPR, CCPA/CPRA, GLBA), and ensure that our policies and practices keep pace with regulatory changes and industry standard processes
• Lead our Legal team on AI Governance best practices relating to data use in AI, as well as implementing policies to keep us in compliance with emerging AI laws 
• Establish regulatory response strategies for privacy and data protection
• Collaborate with legal colleagues, engineering, security, IT, and operational teams to develop, enhance and implement Figma's privacy program and data protection policies and procedures globally
• Partner with Product legal team to advise product teams in evaluating the impact of privacy and data protection laws, regulatory guidance and enforcement actions, and other related guidelines on product features
• Partner with the Commercial, International, and Employment legal teams to ensure appropriate privacy and data protection provisions are incorporated into customer, vendor, partner and employee agreements
• Draft and supervise the development and management of Figma’s internal and external data policies, draft and update privacy policies, template data protection agreements and other foundational resources to promote compliance with evolving global regulatory requirements

We'd love to hear from you if you have:

• J.D. degree from an ABA accredited law school (or foreign equivalent)
• Membership in at least 1 U.S. State Bar, with good standing
• 10+ years of legal practice experience, with at least 6+ years specializing in US and global privacy law, including current expertise in GDPR, UK GDPR, PIPEDA, PIPL, LGPD, CCPA/CPRA, and new and emerging US state laws
• 4+ years of proven experience managing, inspiring, and growing high performing teams
• Experience balancing both doing and delegating, where no task is too small to personally handle, and no challenge is too big for your team to tackle
• Demonstrated expertise building and scaling compliant privacy programs in a technology-first and risk-based way
• Experience with technology companies, including some experience with intersection of data and privacy issues in the use of AI technology
• Ability to thrive in a fast-paced environment, and to tolerate change and ambiguity
• Demonstrated expertise building and scaling compliant privacy programs in a technology-first and risk-based way
• Ability to translate sophisticated legal concepts to into practical and actionable advice for a non-legal audience

While not required, it’s an added plus if you also have:

• You have one or more of the following IAPP certifications: CIPP/US, CIPP/E, CIPP/A, CIPP/C
• You have one or more cybersecurity or AI certifications

At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job