Information Security Senior Risk Analyst (GRC) Job at Synopsys, Burlington, MA

WElrSTlHdS94T1lvbmFsL1BrMEt3ZHFQcWc9PQ==
  • Synopsys
  • Burlington, MA

Job Description

Job Description and Requirements

The Senior GCR Analyst for the Information Security GRC role is a strategic role for Synopsys and will play a significant role in out path to $8 Billion. This is an exceptional opportunity to help build out the Information Security GRC function with a risk-based approach.
This extraordinary individual will be tasked with all aspects of risk and governance management lifecycles ranging from global regulatory requirements, internal risk assessments, testing of internal key controls, Third Party Risk Management (TPRM) and issues management. This individual will be responsible for developing, implementing, and operating the Company's Information Security, Risk and Governance program in accordance with all applicable laws, rules, and regulatory requirements. We are looking for talented and enthusiastic individuals who have a Yes, IF... attitude.
Collaborating closely with the Director of Information Security GRC, and stakeholders across the organization, the Information Security Analyst will be responsible for building and enhancing the GRC portfolio of efforts to raise the overall security and governance posture for Synopsys. This GRC analyst will provide risk management expertise, a business interface, technical to business risk translation and effective communication skills to risk owners throughout the organization and the wider Information Security Function. Building relationships and steering the global organization in its challenge to maximize productivity while reducing risk and improving the overall security posture.

The Senior GRC Security Analyst will leverage multiple industry frameworks and regulatory standards including, but not limited to, ISO 27001, SOC 2 Type II, NIST 800-53, NIST CSF, GDPR, and SOX, etc. This individual will liaise with all business groups including Finance, Legal, Audit, HR and other stakeholders globally to implement new solutions and processes as well as document and remediate outstanding issues.

Job Requirements:
The Information Security Risk Analysts primary role will be to establish best in class Information Security, Risk & Governance programs and policies that will safeguard the company and its partners.
  • Provide input and refine the overall Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
  • Create and execute a risk management program to identify and manage financial, security, technology, personnel, and operational risks that may affect Synopsys
  • Develop, enhance, operationalize enterprise-level security, risk and governance policies, processes, and controls to mitigate risk and comply with applicable laws and regulations as well as industry certifications
  • Implement and manage an Information Security enterprise risk register and provide visibility and reporting to the executive management
  • Implement, enhance, and risk assessment processes, risk acceptance processes and risk exception processes and reporting
  • Aid and assist with the implementation and ongoing activities of a Risk Review Board for a cross functional team
  • Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy
  • Complete ownership and responsibility to answer customer security questionnaires and client required governance information. Coordinate, conduct and function as primary contact for all internal and external audits
  • Identify, track, monitor and report on risk controls and all applicable requirements. Provide recommendations to stakeholders when appropriate
  • Proactively identify opportunities for process automation through use of analytics and automation and partnering with different team members on execution to improve and innovate the Risk program methodology to become more efficient and effective.
  • Identify root cause and opportunities for improvement of internal controls and acquire consensus on remediation / management action plans with key business partners (IT Operations, Product, Information Security, and Internal Audit teams).
  • Serves as a mentor to provide risk management education and consultation to other junior members of the Risk Management team
  • Assist with special projects as needed, with the ability to work in a fast-paced, ever-changing environment.
Qualifications:
  • Has 10+ years of experience in relevant Technology GRC functions related to risk management. Preferably at a financial, technology or SaaS familiar with regulated industries
  • Has a deep understanding of risk management methodologies, frameworks, and principles (e.g., ISO27001, NIST, NIST800-53, SOC1/2, TISAX, SOX, GDPR, etc.) to evaluate and recommend best approach to mitigating risk with best-in-class controls.
  • Strong organizational skills with attention to detail and ability to multitask for project prioritization
The annual range across the U.S. for this role is between $137,000 - $205,000. In addition, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a comparative total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can provide more specific details on the total rewards package upon request.

Hiring Location

USA - Massachusetts - Burlington, USA - Massachusetts - Marlboro, USA - North Carolina - Durham, USA - Oregon - Hillsboro, USA - Texas - Austin, USA - Virginia - Dulles

Job Tags

Similar Jobs

Emerson College

Overhire Stage Hand Job at Emerson College

 ...or event coming up, an email will be sent out for a "call" for folks to work in the various roles necessary for running an event (Stage Hands, Electricians, Sound Board Operations, ect.). In that email will be the name of the event as well as all of the pertinent... 

Insomnia Cookies

Shift Leader Job at Insomnia Cookies

As a Shift Leader at our South Charleston store located at 509 King Street, Charleston SC 29403 , you are the captain of our bakery day or night! You understand what it takes to "Own the Night" (and beyond), by predicting the flow of business during a successful shift.... 

Armanino LLP

Audit Senior Associate Job at Armanino LLP

 ...you access to a network of smart and supportive people, willing to listen to your ideas. As a Senior Associate, you will supervise and plan engagements for audit, review or compilation, supervise staff, research, and perform moderately complex accounting areas of the... 

Grayson Search Partners

Corporate Tax Manager Job at Grayson Search Partners

Seeking a Corporate Tax Manager who will support the company's management staff by managing all corporate tax filings. The Tax Manager is responsible for working directly with the company's tax accountant to ensure that all income tax filings are current and that monthly...