Cyber Compliance Analyst

About Figure

Figure (NASDAQ: FIGR) is transforming capital markets through blockchain. We're proving that blockchain isn't just theory - it's powering real products used by hundreds of thousands of consumers and institutions.

By combining blockchain's transparency and efficiency with AI-driven automation, we've reimagined how loans are originated, funded, and traded in secondary markets. From faster processing times to lower costs and reduced bias, our technology is helping borrowers, investors, and financial institutions achieve better outcomes.

Together with our 170+ partners, we've originated over $17 billion in home equity loans (HELOCs) on our blockchain-native platform, making Figure the largest non-bank provider of home equity financing in the U.S. Figure's ecosystem also includes YLDS, an SEC-registered yield-bearing stablecoin that operates as a tokenized money market fund, and several other products and platforms that are reshaping consumer finance and capital markets.

We're proud to be recognized as one of Forbes' Most Innovative Fintech Startups in 2025 and Fast Company's Most Innovative Companies in Finance and Personal Finance.

About the Role
This cyber compliance & risk management role protects the organization's digital assets and resilience by identifying, assessing, and mitigating cybersecurity risks while ensuring adherence to laws, regulations, and industry standards to protect business continuity. You'll champion security controls, policies, and reporting that align security practice with business needs.

What You'll Do

• Align cybersecurity practices with external regulations (e.g., GDPR, HIPAA) and internal policies.
• Conduct risk assessments and threat/vulnerability analyses across systems and networks.
• Partner with SecOps to continuously monitor systems for threats and validate control effectiveness.
• Recommend, implement, and validate security controls and best practices to reduce risk.
• Develop, maintain, and socialize security policies, standards, and procedures. Contribute to incident response planning and post-incident reviews.
• Document findings, quantify risk, and present recommendations to technical and executive stakeholders.
• Track evolving threats, regulations, and industry trends to continuously improve the program.

What We Look For

• Familiarity with enterprise IT, networks, common threats, and core security tools.
• Working knowledge of frameworks such as NIST and NICE for risk and capability mapping.
• Understanding of data privacy laws and industry-specific regulations.
• Ability to perform risk assessments, analyze data, and conduct threat modeling.
• Clear, concise communication of complex technical risk to both technical and executive audiences.

Salary

• Compensation Range: $80,000 - $100,000/yr
• 25% annual bonus target, paid quarterly
• Equity RSU package
• This is the compensation range for the United States, actual compensation may vary based on individual candidate experience, location, or evolving business needs

Benefits

• Comprehensive health, vision, and dental insurance with 100% employer-paid premiums for employees and their dependents on select plans
• Company HSA, FSA, Dependent Care, 401k, and commuter benefits
• Employer-funded life and disability insurance coverage
• 11 Observed Holidays & PTO plan
• Up to 12 weeks paid family leave
• Continuing education reimbursement

Depending on your residential location certain laws might regulate the way Figure manages applicant data. California Residents, please review our California Employee and General Workforce Privacy Notice for further information. By submitting your application, you are agreeing and acknowledging that you have read and understand the above notice.

Figure will not sponsor work visas for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

#LI-SB1 #LI-Hybrid