Senior GRC Strategist — Policies & Compliance, Equity

Synopsys Inc; Morrisville (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

Synopsys Inc. is seeking a thoughtful cybersecurity professional to lead governance, risk, and compliance initiatives.

You will translate complex regulatory requirements into practical, auditable controls, maintain policies, and coordinate certifications across enterprise teams. You will work with IT, Legal, Procurement, and business stakeholders to drive remediation, evidence collection, and continuous improvement of the security program.

Qualifications

• 5–7 years of hands-on experience in cybersecurity governance, risk management, or compliance.
• Experience applying cybersecurity and compliance frameworks to governance, control implementation, assessments, or certification readiness.
• Experience leading cross-functional GRC programs and coordinating audits or business continuity planning.
• Excellent written, verbal, and presentation skills for leadership and technical teams.
• CISSP, CISM, or equivalent certification preferred.

Responsibilities

• Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks.
• Advise stakeholders on translating policies into risk-aligned controls.
• Monitor regulatory changes and coordinate required updates to controls and certifications.
• Lead compliance attestations and certification programs, including SSPs and ISMS plans.
• Coordinate internal and external audits, evidence collection, and remediation tracking.
• Validate control effectiveness and address deficiencies with owners.
• Communicate governance, compliance, and risk via dashboards and leadership updates.

Skills

ISO 27001

SOC 2

NIST 800-53

NIST CSF

NIST SP 800-171

CMMC

Policy development

Audit readiness

Communication

Education

Bachelor's degree in CS/IS/C cybersecurity

Job description

Synopsys Inc. is seeking a thoughtful cybersecurity professional to lead governance, risk, and compliance initiatives.

You will translate complex regulatory requirements into practical, auditable controls, maintain policies, and coordinate certifications across enterprise teams. You will work with IT, Legal, Procurement, and business stakeholders to drive remediation, evidence collection, and continuous improvement of the security program.