Staff Security Strategist GRC
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · Software Engineering
In short
Synopsys is looking for a detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance (GRC) to join their team in Morrisville, North Carolina. This role involves developing and maintaining cybersecurity policies, supporting audits, managing risk frameworks, and ensuring compliance with various industry standards and regulations.
Responsibilities
- Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks.
- Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls.
- Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, and assess their impact.
- Lead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, and remediation oversight.
- Coordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments.
- Validate the implementation and operating effectiveness of security controls and identify or partner to address deficiencies.
- Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting.
- Partner with various teams to resolve compliance gaps, control deficiencies, observations, and audit findings.
- Partner with Legal, Procurement, Privacy, and business stakeholders to review third-party contracts and security requirements.
- Coordinate the cybersecurity elements of Business Impact Analyses and business continuity plans.
- Communicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through dashboards, metrics, and management updates.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.
- 5–7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline.
- Experience applying cybersecurity and compliance frameworks, including ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX.
- Experience leading cross-functional GRC programs or initiatives.
- Strong program and project management skills.
- Strong analytical and problem-solving skills.
- Ability to translate compliance and contractual requirements into clear control expectations and recommendations.
- Ability to collaborate effectively across technical and non-technical teams.
- Excellent written, verbal, and presentation skills.
Desired Qualifications
- CISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred.
Benefits
- Comprehensive health, wellness, and financial benefits.
- Annual bonus, equity, and other discretionary bonuses may be available.
- Competitive total rewards package.
- Medical and healthcare plans.
- Time Away (ETO and FTO Programs).
- Family Support (Maternity and paternity leave, parenting resources, adoption and surrogacy assistance).
- Employee Stock Purchase Plan (ESPP) with a 15% discount.
- Retirement Plans.
- Competitive salaries.
Skills
AIMachine LearningGenAICloudISO 27001SOC 2NIST 800-53NIST SP 800-171NIST CSFCMMCCyber EssentialsTISAXCISSPCISM
#GRC#cybersecurity#governance#risk#compliance#policies#standards#procedures#audits#assessments#third-party security#business continuity planning
About Synopsys Inc
Smart, Secure Everything—From Silicon to Software Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything―where devices are getting smarter, everything’s connected, and everything must be secure. Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at…
Company
Synopsys IncJob Posted
2 days ago
Employment Type
Full Time
Work mode
On Site
Salary
US$161,000–242,000 / year
Experience Level
Mid-Senior
Locations
Morrisville, United States
Qualification
Bachelor
Applicants
Be an early applicant
Similar Jobs
Synopsys Inc
London, United KingdomSite Reliability Engineer, Infrastructure Services (Sr Staff)
Full Time Be an early applicant Posted 4 days ago
Alfa Laval
San Bonifacio, ItalyQuality Engineer
€35k/yr Full Time Be an early applicant Posted 4 days ago
WeQuel
Södertälje, SwedenValideringsledare – Konsultuppdrag inom Life Science
Full Time Be an early applicant Posted 4 days ago
Accenture
Newcastle, United KingdomSecurity Consultant - H&PS
Full Time Be an early applicant Posted 4 days ago
Saab
Linköping, SwedenProduction Quality Engineer
Full Time Be an early applicant Posted 4 days ago
Accenture
Copenhagen, DenmarkInd & Func AI Decision Science New Associate
Full Time Be an early applicant Posted 4 days ago