Staff Security Strategist GRC at Synopsys in Morrisville, NC

Job description

Base Salary Range: $128800 - $ 193200 At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability. In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S. Job Description and Requirements We Are: Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow. You Are: You are a thoughtful, detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance. You understand cybersecurity frameworks such as ISO 27001, SOC 2, NIST 800-53, and NIST SP 800-171, and know how to translate regulatory and security requirements into practical, sustainable controls. You have experience developing and maintaining cybersecurity policies, standards, and procedures, supporting audits and compliance assessments, reviewing third-party security requirements, and contributing to business continuity planning and testing. You are comfortable building audit-ready documentation, coordinating evidence collection, identifying control gaps, and driving remediation activities across multiple teams. You work effectively with technical teams, business functions, internal audit, assessors, and leadership. You communicate cybersecurity, compliance, and risk topics clearly, manage competing priorities effectively, and bring structure and accountability to complex GRC initiatives. What You’ll Be Doing: • Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks, ensuring alignment with business objectives, regulatory obligations, industry standards, and evolving risk requirements. • Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls. • Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, assess their impact on controls, certifications, and business processes, and coordinate required updates. • Lead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, remediation oversight, and lifecycle management of SSPs, System Descriptions, ISMS plans, and related documentation. • Coordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments, including evidence preparation, stakeholder coordination, findings management, and corrective action tracking. • Validate the implementation and operating effectiveness of security controls, identify evidence or control gaps, and partner with system and control owners to address deficiencies. • Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting. • Partner with Cybersecurity, IT, business teams, assessors, system owners, and control owners to resolve compliance gaps, control deficiencies, observations, and audit findings, including establishing ownership, target date