{"id":93866,"url":"https://alion.io/job/altera-senior-principal-grc-analyst","title":"Senior / Principal GRC Analyst","company":{"id":5328,"name":"Altera","domain":"altera.com","url":"https://alion.io/company/altera","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":13,"ghost_share":0,"stale_share":0.385,"repost_share":0.077,"time_to_fill_p50_days":60,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":72000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST 800-171","optional":false}],"status":"live","first_seen_at":"2026-05-12T00:00:00Z","employer_posted_date":"2026-05-12","last_verified_at":"2026-10-22T15:21:55Z","board_verified":true,"closed_at":null,"days_open":165,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":164},"description":"Job Details:\nJob Description:\nRole Summary\nThe Senior / Principal GRC Analyst is a senior individual contributor responsible for architecting, leading, and scaling enterprise governance, risk, and compliance programs across highly regulated, technology-driven environments. This role owns implementation and continuous improvement of ISO/IEC 27001, ISO/IEC 42001 (AI Management Systems), GDPR, CCPA/CPRA, and CMMC, and acts as a trusted advisor to security leadership, engineering, legal, and executive stakeholders.\nThis role requires strong hands-on cybersecurity knowledge, deep regulatory expertise, and the ability to translate technical security architectures into audit-ready, business-aligned compliance outcomes.\nCore Responsibilities (All Environments)\nDefine and maintain a risk-based GRC architecture aligned to ISO, NIST, privacy, and regulatory requirements.\nLead end-to-end implementations of: ISO/IEC 27001 (ISMS ownership, risk methodology, SoA, internal audits)\n ISO/IEC 42001 (AI governance, AI risk and control design)\nGDPR and CCPA/CPRA privacy programs\nCMMC / NIST SP 800-171\n\nTranslate security architectures and technical controls into compliant policies, standards, and evidence.\nLead enterprise, third-party, cloud, and AI-specific risk assessments.\nServe as primary interface for auditors, assessors, regulators, customers, and partners.\nDrive efficiency using GRC platforms, security telemetry, and AI-assisted compliance tooling.\nMentor junior GRC professionals and influence cross-functional teams without direct authority.\nTechnical Cybersecurity Skills & Expectations\nSecurity Architecture & Controls\nStrong understanding of defense-in-depth architectures, including:Network segmentation, firewalls, IDS/IPS\nEndpoint Detection & Response (EDR/XDR)\nIdentity and Access Management (IAM), SSO, MFA, RBAC\n\nAbility to assess and validate technical control effectiveness, not just paper compliance.\nCloud & SaaS Security\nHands-on familiarity with cloud security models (AWS, Azure, GCP concepts):Shared responsibility\nLogging and monitoring\nEncryption at rest and in transit\nSecure CI/CD and infrastructure-as-code risks\n\nAbility to map cloud security controls to ISO 27001, NIST, and CMMC requirements.\nData Protection & Privacy Engineering\nUnderstanding of:Data classification and labeling\nDLP, encryption, key management\nData residency and cross-border data transfer controls\n\nAbility to work with engineering teams on privacy-by-design implementations.\nVulnerability & Risk Management\nFamiliarity with:Vulnerability management lifecycle\nSecure configuration baselines\nRisk acceptance, compensating controls, and technical debt\n\nAbility to assess real-world risk rather than checklist compliance.\nIncident Response & Monitoring\nKnowledge of incident response processes, including:Detection, containment, and post-incident reviews\nRegulatory and contractual notification requirements\n\nAbility to validate IR plans against ISO and regulatory expectations.\nAI & Emerging Technology Risk\nUnderstanding of AI-related security and governance risks:Training data integrity\nModel lifecycle and access control\nBias, explainability, and accountability considerations\n\nExposure to AI-enabled security and compliance tools preferred.\nIndustry-Specific Skills\nDefense / Government Contractors\nCMMC L1-L3 and NIST SP 800-171 technical control interpretation\nCUI protection, enclave design, boundary controls\nVendor and subcontractor security assurance\nDFARS-aligned audit and evidence readiness\nSemiconductor / Hardware & Manufacturing\nProtection of design IP, fabrication data, and production systems\nSupplier and foundry security risk assessments\nAlignment of cyber, physical, and operational security controls\nGlobal compliance and data localization considerations\nSaaS / Cloud-Native\nCloud-native ISMS design\nSecure SDLC and CI/CD risk governance\nCustomer audits, security questionnaires, trust signals\nAI feature governance and responsible data usage\nQualifications:\nRequired Qualifications\n7-12+ years of experience in GRC, security, privacy, or risk management.\nProven ownership of ISO 27001, GDPR/CCPA, and CMMC or NIST 800-171 programs.\nStrong technical and regulatory interpretation skills.\nAbility to operate independently at senior or principal IC level.\nPreferred Certifications & Experience\nISO 27001 Lead Implementer / Lead Auditor\nCISSP, CISA, CRISC\nCIPM, CIPP/US, CIPP/E\nExperience with Microsoft security and compliance platforms (Purview, Defender, Entra ID) or equivalent\nExposure to AI governance frameworks, tools, or regulations\nRole Leveling Expectations\nSenior GRC Analyst\nLeads major compliance initiatives\nActs as SME for key frameworks\nPartners closely with security and engineering\nDefines enterprise GRC strategy and architecture\nAdvises executives on material cyber and regulatory risk\nShapes AI governance and future compliance roadmaps\nMentors and raises overall GRC maturity\nJob Type:\nRegularShift:\nPrimary Location:\nBengaluru, Karnataka, IndiaAdditional Locations:\nPosting Statement:\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.","description_format":"text","description_chars":5464,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Processors, MCUs & AI Chips"],"lifecycle":[{"event":"open","at":"2026-05-12T00:00:00Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.575,"p_room":0.28,"age_days":164,"expected_fill_days":60,"reasons":["conf:14","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/altera-senior-principal-grc-analyst","json_url":"https://alion.io/job/altera-senior-principal-grc-analyst.json","meta":{"generated_at":"2026-10-24T00:51:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1318,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5328},"rest":"https://alion.io/mcp/rest/get_company?id=5328"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faltera-senior-principal-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faltera-senior-principal-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faltera-senior-principal-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/altera-senior-principal-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faltera-senior-principal-grc-analyst"}]}