--- Figma is growing our team of passionate people on a mission to make design accessible to all. Born on the Web, Figma helps entire product teams brainstorm, design and build better products — from start to finish. Whether it’s consolidating tools, simplifying workflows, or collaborating across teams and time zones, Figma makes the design process faster, more efficient, and fun while keeping everyone on the same page. From great products to long-lasting companies, we believe that nothing great is made alone—come make with us!
Internal Audit Analyst (Offshore, KMC)
The Internal Audit Analyst will support the administration and execution of Figma’s SOX Compliance Program across both business and IT processes. This role will focus on structured, repeatable tasks that ensure accurate documentation, timely follow ups, and well maintained systems that anchor an effective SOX program. The analyst will assist with evidence management, data reconciliation, initial control testing steps, and routine coordination activities. Initial assessments may be performed as part of testing, but all final conclusions and judgment based decisions will remain with Figma. This is an opportunity to support a global Internal Audit function in a fast growing SaaS environment and to help scale a reliable offshore delivery capability over time.
Health Insurance/HMO
Enjoy unlimited MadMax Coffee
Diverse learning & growth opportunities
Accessible Cloud HR platform (Sprout)
Above standard leaves
What you will do at Figma
Program Coordination and Administration
· Support scheduling of walkthroughs, meetings, and recurring SOX activities, including maintaining invites and tracking attendance.
· Maintain SOX status trackers, ensuring information is accurate, timely, and aligned with team reporting needs.
· Reconcile AuditBoard (GRC Tool) data with manual trackers to confirm completeness and consistency.
· Assist with rolling forward and setting up the new AuditBoard SOX cycle, including PBC requests, templates, and documentation structure.
· Prepare weekly status summaries and metrics based on defined criteria.
· Provide administrative communication with stakeholders (for example, reminders for PBCs or follow ups), without requesting information that requires interpretation or advisory guidance.