GRC Security Strategist: Policy & Compliance (Hybrid)

Synopsys, Inc.; Morrisville (NC); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health benefits

Wellness programs

Financial benefits

Job summary

Synopsys, Inc. is seeking a hands-on cybersecurity professional with 5-7 years of governance, risk, and compliance expertise. You will develop and govern policies, translate requirements into practical controls, and lead audits and certifications across the organization.

The role collaborates with IT, engineering, legal, and procurement to strengthen Synopsys' security posture. You will monitor evolving regulations, coordinate evidence collection, and drive remediation across multiple teams

Qualifications

• Strong knowledge of governance, risk and compliance in cybersecurity.
• Experience applying ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX.
• Ability to translate requirements into practical controls and documentation.

Responsibilities

• Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks.
• Advise stakeholders on translating policies into risk-aligned controls.
• Monitor regulatory changes and coordinate updates to controls and certifications.
• Lead cybersecurity compliance attestations and certification programs including SSPs and ISMS plans.
• Coordinate internal and external audits, readiness reviews, and evidence collection.
• Validate the effectiveness of security controls and address gaps with owners.

Skills

Cybersecurity governance

Audit readiness

Regulatory frameworks

Policy development

Cross-functional collaboration

Education

Bachelor's degree in Computer Science/Information Systems/Cybersecurity

Equivalent combination of education and relevant experience

Job description

Synopsys, Inc. is seeking a hands-on cybersecurity professional with 5-7 years of governance, risk, and compliance expertise. You will develop and govern policies, translate requirements into practical controls, and lead audits and certifications across the organization.

The role collaborates with IT, engineering, legal, and procurement to strengthen Synopsys' security posture. You will monitor evolving regulations, coordinate evidence collection, and drive remediation across multiple teams