Staff Security Strategist GRC
Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · Mjukvaruutveckling
I korthet
Synopsys is looking for a detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance (GRC) to join their team in Morrisville, North Carolina. This role involves developing and maintaining cybersecurity policies, supporting audits, managing risk frameworks, and ensuring compliance with various industry standards and regulations.
Ansvarsområden
- Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks.
- Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls.
- Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, and assess their impact.
- Lead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, and remediation oversight.
- Coordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments.
- Validate the implementation and operating effectiveness of security controls and identify or partner to address deficiencies.
- Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting.
- Partner with various teams to resolve compliance gaps, control deficiencies, observations, and audit findings.
- Partner with Legal, Procurement, Privacy, and business stakeholders to review third-party contracts and security requirements.
- Coordinate the cybersecurity elements of Business Impact Analyses and business continuity plans.
- Communicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through dashboards, metrics, and management updates.
Krav
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.
- 5–7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline.
- Experience applying cybersecurity and compliance frameworks, including ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX.
- Experience leading cross-functional GRC programs or initiatives.
- Strong program and project management skills.
- Strong analytical and problem-solving skills.
- Ability to translate compliance and contractual requirements into clear control expectations and recommendations.
- Ability to collaborate effectively across technical and non-technical teams.
- Excellent written, verbal, and presentation skills.
Önskade kvalifikationer
- CISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred.
Förmåner
- Comprehensive health, wellness, and financial benefits.
- Annual bonus, equity, and other discretionary bonuses may be available.
- Competitive total rewards package.
- Medical and healthcare plans.
- Time Away (ETO and FTO Programs).
- Family Support (Maternity and paternity leave, parenting resources, adoption and surrogacy assistance).
- Employee Stock Purchase Plan (ESPP) with a 15% discount.
- Retirement Plans.
- Competitive salaries.
Färdigheter
AIMachine LearningGenAICloudISO 27001SOC 2NIST 800-53NIST SP 800-171NIST CSFCMMCCyber EssentialsTISAXCISSPCISM
#GRC#cybersecurity#governance#risk#compliance#policies#standards#procedures#audits#assessments#third-party security#business continuity planning
Om Synopsys Inc
Smart, Secure Everything—From Silicon to Software Synopsys technology is at the heart of innovations that are changing the way we live and work. The Internet of Things. Autonomous cars. Wearables. Smart medical devices. Secure financial services. Machine learning and computer vision. These breakthroughs are ushering in the era of Smart, Secure Everything―where devices are getting smarter, everything’s connected, and everything must be secure. Powering this new era of technology are advanced silicon chips, which are made even smarter by the remarkable software that drives them. Synopsys is at…
Företag
Synopsys IncPublicerade jobb
för 3 dagar sedan
Anställningstyp
Heltid
Arbetsform
På plats
Lön
161 000–242 000 US$ / år
Erfarenhetsnivå
Mellannivå
Platser
Morrisville, United States
Kvalifikation
Kandidatexamen
Sökande
Ansök tidigt
Liknande jobb
Ericsson
Budapest, HungaryStudent Data Engineer
Heltid Ansök tidigt Publicerad för 4 dagar sedan
Google
Stockholm, SwedenSenior Software Engineer, Google Meet Security
1–1,02 mn kr/år Heltid Ansök tidigt Publicerad för 3 dagar sedan
Nordea
Łódź, PolandAssociate Process Specialist
Heltid Ansök tidigt Publicerad för 3 dagar sedan
Synopsys Inc
GermanyCFD Applications Engineer (m/f/d)
Heltid Ansök tidigt Publicerad för 3 dagar sedan
Saab
Solna, Sweden +1 flerService Owner - Data Security
Heltid Ansök tidigt Publicerad för 3 dagar sedan
Alfa Laval
San Bonifacio, ItalyQuality Engineer
35 tn €/år Heltid Ansök tidigt Publicerad för 3 dagar sedan