Head of Security Risk, Assurance & Trust | ISO 27001 & SOX

Sitime-Corporation; Santa Clara (CA); On-site; USD 155,000 - 221,000; Full time

Benefits offered by this job

401k plan

Equity grants

Quarterly bonus

Health and wellness benefits

Job summary

SiTime is seeking a Sr. Manager of Security Risk, Assurance and Trust in Santa Clara, CA. You will lead the enterprise risk, third‑party risk program and certification activities reporting to the CISO, building scalable governance and enforcement across IT, Legal, Finance, Design and Engineering.

You will own ISO 27001, SOX ITGC, and security policy before scaling the function with hires and contractors. This is a hands‑on, then strategic role focused on improving SiTime’s security posture and

Qualifications

• 8+ years in information security, risk, or assurance.
• 3+ years building or rebuilding a program.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.
• One of CISSP, CISA, CRISC, or CCSK preferred.

Responsibilities

• Own customer security assurance end to end, including certification and audit-report library.
• Lead enterprise risk through a formal risk register and third‑party risk program.
• Design and enforce security policy and standards aligned with NIST/ISO/SOX.
• Manage audits, certifications, and remediation cycles with cross‑functional teams.

Skills

Information security

Program management

Leadership

Cloud security (AWS/Azure)

External audits & certifications

Education

Bachelor’s degree in CS/InfoSec/Engineering

Certifications: CISSP / CISA / CRISC / CCSK

Job description

SiTime is seeking a Sr. Manager of Security Risk, Assurance and Trust in Santa Clara, CA. You will lead the enterprise risk, third‑party risk program and certification activities reporting to the CISO, building scalable governance and enforcement across IT, Legal, Finance, Design and Engineering.

You will own ISO 27001, SOX ITGC, and security policy before scaling the function with hires and contractors. This is a hands‑on, then strategic role focused on improving SiTime’s security posture and