Staff Security Strategist GRC
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Software Engineering
In short
Synopsys is looking for a detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance (GRC) to join their team in Morrisville, North Carolina. This role involves developing and maintaining cybersecurity policies, supporting audits, managing risk frameworks, and ensuring compliance with various industry standards and regulations.
Responsibilities
- Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks.
- Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls.
- Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, and assess their impact.
- Lead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, and remediation oversight.
- Coordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments.
- Validate the implementation and operating effectiveness of security controls and identify or partner to address deficiencies.
- Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting.
- Partner with various teams to resolve compliance gaps, control deficiencies, observations, and audit findings.
- Partner with Legal, Procurement, Privacy, and business stakeholders to review third-party contracts and security requirements.
- Coordinate the cybersecurity elements of Business Impact Analyses and business continuity plans.
- Communicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through dashboards, metrics, and management updates.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.
- 5–7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline.
- Experience applying cybersecurity and compliance frameworks, including ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX.
- Experience leading cross-functional GRC programs or initiatives.
- Strong program and project management skills.
- Strong analytical and problem-solving skills.
- Ability to translate compliance and contractual requirements into clear control expectations and recommendations.
- Ability to collaborate effectively across technical and non-technical teams.
- Excellent written, verbal, and presentation skills.
Desired Qualifications
- CISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred.
Benefits
- Comprehensive health, wellness, and financial benefits.
- Annual bonus, equity, and other discretionary bonuses may be available.
- Competitive total rewards package.
- Medical and healthcare plans.
- Time Away (ETO and FTO Programs).
- Family Support (Maternity and paternity leave, parenting resources, adoption and surrogacy assistance).
- Employee Stock Purchase Plan (ESPP) with a 15% discount.
- Retirement Plans.
- Competitive salaries.
Skills
AIMachine LearningGenAICloudISO 27001SOC 2NIST 800-53NIST SP 800-171NIST CSFCMMCCyber EssentialsTISAXCISSPCISM
#GRC#cybersecurity#governance#risk#compliance#policies#standards#procedures#audits#assessments#third-party security#business continuity planning
About Synopsys Inc
Smart, Secure Everything—From Silicon to Software Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything―where devices are getting smarter, everything’s connected, and everything must be secure. Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at…
Company
Synopsys IncJob Posted
2 days ago
Employment Type
Full Time
Work mode
On Site
Salary
US$161,000–242,000 / year
Experience Level
Mid-Senior
Locations
Morrisville, United States
Qualification
Bachelor
Applicants
Be an early applicant
Similar Jobs
Qualcomm
San Diego, United States of AmericaQuality Systems Engineer - Data Center
US$132–198k/yr Full Time Be an early applicant Posted 4 days ago
Qualcomm
San Diego, United States of AmericaStaff Product Manager, Product Planning
US$182–273k/yr Full Time Be an early applicant Posted 4 days ago
Qualcomm
San Diego, United States of AmericaEmbedded Real Time Operating System Staff Software Engineer (QuRT OS, Zephyr)
US$160–240k/yr Full Time Be an early applicant Posted 4 days ago
Qualcomm
Santa Clara, United States of AmericaStaff Program Manager
US$202–303k/yr Full Time Be an early applicant Posted 4 days ago
Qualcomm
San Diego, United States of AmericaSoC Debug Engineer, Staff
US$146–218k/yr Full Time Be an early applicant Posted 4 days ago
Qualcomm
San Diego, United States of AmericaSoC Infrastructure/NoC, Power & Performance Validation Engineer
US$122–183k/yr Full Time Be an early applicant Posted 4 days ago