Cyber Compliance Analyst

Figure • Full-time • Remote (Remote) • $80k - $100k / year • 4d ago

About Figure

Figure (NASDAQ: FIGR) is transforming capital markets through blockchain. We’re proving that blockchain isn’t just theory - it’s powering real products used by hundreds of thousands of consumers and institutions.

By combining blockchain’s transparency and efficiency with AI-driven automation, we’ve reimagined how loans are originated, funded, and traded in secondary markets. From faster processing times to lower costs and reduced bias, our technology is helping borrowers, investors, and financial institutions achieve better outcomes.

Together with our 170+ partners, we’ve originated over $17 billion in home equity loans (HELOCs) on our blockchain-native platform, making Figure the largest non-bank provider of home equity financing in the U.S. Figure’s ecosystem also includes YLDS, an SEC-registered yield-bearing stablecoin that operates as a tokenized money market fund, and several other products and platforms that are reshaping consumer finance and capital markets.

We’re proud to be recognized as one of Forbes’ Most Innovative Fintech Startups in 2025 and Fast Company’s Most Innovative Companies in Finance and Personal Finance.

About the Role
This cyber compliance & risk management role protects the organization’s digital assets and resilience by identifying, assessing, and mitigating cybersecurity risks while ensuring adherence to laws, regulations, and industry standards to protect business continuity. You’ll champion security controls, policies, and reporting that align security practice with business needs.

What You’ll Do

Align cybersecurity practices with external regulations (e.g., GDPR, HIPAA) and internal policies.
Conduct risk assessments and threat/vulnerability analyses across systems and networks.
Partner with SecOps to continuously monitor systems for threats and validate control effectiveness.
Recommend, implement, and validate security controls and best practices to reduce risk.
Develop, maintain, and socialize security policies, standards, and procedures. Contribute to incident response planning and post-incident reviews.
Document findings, quantify risk, and present recommendations to technical and executive stakeholders.
Track evolving threats, regulations, and industry trends to continuously improve the program.

What We Look For

Familiarity with enterprise IT, networks, common threats, and core security tools.
Working knowledge of frameworks such as NIST and NICE for risk and capability mapping.
Understanding of data privacy laws and industry-specific regulations.
Ability to perform risk assessments, analyze data, and conduct threat modeling.
Clear, concise communication of complex technical risk to both technical and executive audiences.

Salary

Compensation Range: $80,000 - $100,000/yr
25% annual bonus target, paid quarterly
Equity RSU package
This is the compensation range for the United States, actual compensation may vary based on individual candidate experience, location, or evolving business needs

Benefits

Comprehensive health, vision, and dental insurance with 100% employer-paid premiums for employees and their dependents on select plans
Company HSA, FSA, Dependent Care, 401k, and commuter benefits
Employer-funded life and disability insurance coverage
11 Observed Holidays & PTO plan
Up to 12 weeks paid family leave
Continuing education reimbursement

Depending on your residential location certain laws might regulate the way Figure manages applicant data. California Residents, please review our California Employee and General Workforce Privacy Notice for further information. By submitting your application, you are agreeing and acknowledging that you have read and understand the above notice.

Figure will not sponsor work visas for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

#LI-SB1 #LI-Hybrid