{"id":3019803,"url":"https://alion.io/job/synopsys-security-strategist-grc-staff-19284","title":"Security Strategist GRC, Staff, 19284","company":{"id":39954,"name":"Synopsys","domain":"synopsys.com","url":"https://alion.io/company/synopsys-inc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Avature","truth_index":{"grade":"A","score":98,"open_postings":67,"ghost_share":0.06,"stale_share":0,"repost_share":0.224,"time_to_fill_p50_days":17,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Morrisville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":113000,"max_usd":226000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":451},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-21T17:31:07Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-01T15:35:56Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Job Description and Requirements\nWe Are:\nSynopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.\nYou Are:\nYou are a thoughtful, detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance. You understand cybersecurity frameworks such as ISO 27001, SOC 2, NIST 800-53, and NIST SP 800-171, and know how to translate regulatory and security requirements into practical, sustainable controls.\nYou have experience developing and maintaining cybersecurity policies, standards, and procedures, supporting audits and compliance assessments, reviewing third-party security requirements, and contributing to business continuity planning and testing. You are comfortable building audit-ready documentation, coordinating evidence collection, identifying control gaps, and driving remediation activities across multiple teams.\nYou work effectively with technical teams, business functions, internal audit, assessors, and leadership. You communicate cybersecurity, compliance, and risk topics clearly, manage competing priorities effectively, and bring structure and accountability to complex GRC initiatives.\nWhat You’ll Be Doing:\nDevelop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks, ensuring alignment with business objectives, regulatory obligations, industry standards, and evolving risk requirements.\nAdvise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls.\nMonitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, assess their impact on controls, certifications, and business processes, and coordinate required updates.\nLead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, remediation oversight, and lifecycle management of SSPs, System Descriptions, ISMS plans, and related documentation.\nCoordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments, including evidence preparation, stakeholder coordination, findings management, and corrective action tracking.\nValidate the implementation and operating effectiveness of security controls, identify evidence or control gaps, and partner with system and control owners to address deficiencies.\nMonitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting.\nPartner with Cybersecurity, IT, business teams, assessors, system owners, and control owners to resolve compliance gaps, control deficiencies, observations, and audit findings, including establishing ownership, target dates, dependencies, and escalation paths.\nPartner with Legal, Procurement, Privacy, business stakeholders, and suppliers to review third-party contracts, security exhibits, data protection terms, and proposed exceptions, defining risk-based security requirements and appropriate remediation or compensating controls.\nCoordinate the cybersecurity elements of Business Impact Analyses and business continuity plans, support exercises and testing, document results and corrective actions, and maintain supporting evidence.\nCommunicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through clear dashboards, metrics, management updates, and stakeholder education.\nThe Impact You Will Have:\nImprove audit readiness through continuous control verification, effective evidence management, and stronger assessment processes.\nStrengthen Synopsys’ cybersecurity governance and compliance posture by advancing GRC policies, controls, documentation, and processes.\nReduce third-party cybersecurity risk by strengthening security requirements and contracting practices for suppliers and partners.\nIncrease organizational resilience through effective business continuity planning, testing, and corrective actions.\nSupport regulatory compliance and responsible business growth by translating cybersecurity frameworks and requirements into practical guidance for technical and business teams.\nHelp protect Synopsys’ sensitive information and intellectual property while reinforcing its position as a trusted business partner.\nWhat You’ll Need:\nBachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.\n5-7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline.\nExperience applying cybersecurity and compliance frameworks, including ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX, to governance, control implementation, assessments, or certification readiness.\nExperience leading cross-functional GRC programs or initiatives involving audits, assessments, cybersecurity policy development, or business continuity planning and testing.\nStrong program and project management skills, including the ability to establish milestones, manage dependencies, coordinate stakeholders, and drive multiple initiatives through completion.\nStrong analytical and problem-solving skills, with the ability to interpret compliance, policy, and contractual requirements, evaluate evidence, identify control gaps, and provide meaningful risk analysis.\nAbility to translate compliance and contractual requirements into clear control expectations, risk-based recommendations, and actionable guidance.\nAbility to collaborate effectively across technical and non-technical teams and coordinate the resolution of complex compliance and risk issues.\nExcellent written, verbal, and presentation skills, including the ability to communicate complex cybersecurity, compliance, and risk topics clearly to leadership, technical teams, business stakeholders, assessors, and external parties.\nCISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred.\nThe Team You’ll Be A Part Of:\nYou will join Synopsys’ Cybersecurity governance and compliance team, working with partners across IT, Engineering, Business Operations, Legal, Procurement, Privacy, and other functions. The team focuses on strengthening cybersecurity governance and compliance while helping protect Synopsys’ assets and reputation.\nYou will play a key role in audit readiness, evidence management, policy governance, third-party security reviews, and business continuity activities, helping drive consistent and sustainable cybersecurity practices across the organization.\nRewards and Benefits:\nWe offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.\nAt Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability.\nIn addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S.","description_format":"text","description_chars":8139,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EDA Software","Simulation & Digital Twin Software","Information Security","Semiconductor IP & Chip Design Services"],"lifecycle":[{"event":"open","at":"2026-10-21T17:31:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 178 · green card filings: 177","filings_12m":178,"filings_prev_12m":208,"green_card_filings_12m":177,"median_offered_wage_usd":157472,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.876,"p_room":0.9,"age_days":10,"expected_fill_days":17,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/synopsys-security-strategist-grc-staff-19284","json_url":"https://alion.io/job/synopsys-security-strategist-grc-staff-19284.json","meta":{"generated_at":"2026-11-01T18:49:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28810,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":39954},"rest":"https://alion.io/mcp/rest/get_company?id=39954"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsynopsys-security-strategist-grc-staff-19284"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsynopsys-security-strategist-grc-staff-19284"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsynopsys-security-strategist-grc-staff-19284"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/synopsys-security-strategist-grc-staff-19284\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsynopsys-security-strategist-grc-staff-19284"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3019803}},{"tool":"search_jobs","arguments":{"company":"synopsys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3019803},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}