Staff Security Strategist at Synopsys, Inc.

Job description

We Are: Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow. You Are: You are a thoughtful, detail-oriented cybersecurity professional with strong experience in governance, risk, and compliance. You understand cybersecurity frameworks such as ISO 27001, SOC 2, NIST 800-53, and NIST SP 800-171, and know how to translate regulatory and security requirements into practical, sustainable controls. You have experience developing and maintaining cybersecurity policies, standards, and procedures, supporting audits and compliance assessments, reviewing third-party security requirements, and contributing to business continuity planning and testing. You are comfortable building audit-ready documentation, coordinating evidence collection, identifying control gaps, and driving remediation activities across multiple teams. You work effectively with technical teams, business functions, internal audit, assessors, and leadership. You communicate cybersecurity, compliance, and risk topics clearly, manage competing priorities effectively, and bring structure and accountability to complex GRC initiatives. What You’ll Be Doing: • Develop, maintain, review, and govern cybersecurity policies, standards, procedures, and control frameworks, ensuring alignment with business objectives, regulatory obligations, industry standards, and evolving risk requirements. • Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls. • Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, assess their impact on controls, certifications, and business processes, and coordinate required updates. • Lead cybersecurity compliance attestations and certification programs, including readiness planning, assessor coordination, remediation oversight, and lifecycle management of SSPs, System Descriptions, ISMS plans, and related documentation. • Coordinate internal and external audits, mock audits, readiness reviews, gap assessments, and compliance assessments, including evidence preparation, stakeholder coordination, findings management, and corrective action tracking. • Validate the implementation and operating effectiveness of security controls, identify evidence or control gaps, and partner with system and control owners to address deficiencies. • Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting. • Partner with Cybersecurity, IT, business teams, assessors, system owners, and control owners to resolve compliance gaps, control deficiencies, observations, and audit findings, including establishing ownership, target dates, dependencies, and escalation paths. • Partner with Legal, Procurement, Privacy, business stakeholders, and suppliers to review third-party contracts, security exhibits, data protection terms, and proposed exceptions, defining risk-based security requirements and appropriate remediation or compensating controls. • Coordinate the cybersecurity elements of Business Impact Analyses and business continuity plans, support exercises and testing, document results and corrective actions, and maintain supporting evidence. • Communicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through clear dashboards, metrics, management updates, and stakeholder education. The Impact You Will Have: • Improve audit readiness through continuous control verification, effective evidence management, and stronger assessment processes. • Strengthen Synopsys’ cybersecurity governance and compliance posture by advancing GRC policies, controls, documentation, and processes. • Reduce third-party cybersecurity risk by strengthening security requirements and contracting practices for suppliers and partners. • Increase organizational resilience through effective business continuity planning, testing, and corrective actions. • Support regulatory compliance and responsible business growth by translating cybersecurity frameworks and requirements into practical guidance for technical and business teams. • Help protect Synopsys’ sensitive information and intellectual property while reinforcing its position as a trusted business partner. What You’ll Need: • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience. • 5–7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline. • Experience applying cybersecurity and compliance frameworks, including ISO 27001, SOC 2, NIST 800-53, NIST CSF, NIST SP 800-171, CMMC, Cyber Essentials, and TISAX, to governance, control implementation, assessments, or certification readiness. • Experience leading cross-functional GRC programs or initiatives involving audits, assessments, cybersecurity policy development, or business continuity planning and testing. • Strong program and project management skills, including the ability to establish milestones, manage dependencies, coordinate stakeholders, and drive multiple initiatives through completion. • Strong analytical and problem-solving skills, with the ability to interpret compliance, policy, and contractual requirements, evaluate evidence, identify control gaps, and provide meaningful risk analysis. • Ability to translate compliance and contractual requirements into clear control expectations, risk-based recommendations, and actionable guidance. • Ability to collaborate effectively across technical and non-technical teams and coordinate the resolution of complex compliance and risk issues. • Excellent written, verbal, and presentation skills, including the ability to communicate complex cybersecurity, compliance, and risk topics clearly to leadership, technical teams, business stakeholders, assessors, and external parties. • CISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred. The Team You’ll Be A Part Of: You will join Synopsys’ Cybersecurity governance and compliance team, working with partners across IT, Engineering, Business Operations, Legal, Procurement, Privacy, and other functions. The team focuses on strengthening cybersecurity governance and compliance while helping protect Synopsys’ assets and reputation. You will play a key role in audit readiness, evidence management, policy governance, third-party security reviews, and business continuity activities, helping drive consistent and sustainable cybersecurity practices across the organization. Rewards and Benefits: We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process. #LI-Hybrid At Synopsys, we want talented people of every background to feel valued and supported to do their best work. Synopsys considers all applicants for employment without regard to race, color, religion, national origin, gender, sexual orientation, age, military veteran status, or disability. In addition to the base salary, this role may be eligible for an annual bonus, equity, and other discretionary bonuses. Synopsys offers comprehensive health, wellness, and financial benefits as part of a competitive total rewards package. The actual compensation offered will be based on a number of job-related factors, including location, skills, experience, and education. Your recruiter can share more specific details on the total rewards package upon request. The base salary range for this role is across the U.S.

Requirements

Must-haves

Advise control owners, system owners, and business stakeholders on translating cybersecurity policies and governance frameworks into practical, risk-aligned controls.
Monitor changes in cybersecurity, compliance, privacy, regulatory, and legal requirements, assess their impact on controls, certifications, and business processes, and coordinate required updates.
Validate the implementation and operating effectiveness of security controls, identify evidence or control gaps, and partner with system and control owners to address deficiencies.
Monitor control effectiveness between formal assessments using evidence validation, control metrics, remediation tracking, and reporting.
Coordinate the cybersecurity elements of Business Impact Analyses and business continuity plans, support exercises and testing, document results and corrective actions, and maintain supporting evidence.
Communicate cybersecurity governance, compliance, certification, business continuity, control, and third-party risk through clear dashboards, metrics, management updates, and stakeholder education.
Improve audit readiness through continuous control verification, effective evidence management, and stronger assessment processes.
Strengthen Synopsys’ cybersecurity governance and compliance posture by advancing GRC policies, controls, documentation, and processes.
Reduce third-party cybersecurity risk by strengthening security requirements and contracting practices for suppliers and partners.
Increase organizational resilience through effective business continuity planning, testing, and corrective actions.
Support regulatory compliance and responsible business growth by translating cybersecurity frameworks and requirements into practical guidance for technical and business teams.
Help protect Synopsys’ sensitive information and intellectual property while reinforcing its position as a trusted business partner.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience.
5–7 years of hands-on experience in cybersecurity governance, risk management, compliance, or a related discipline.
Experience leading cross-functional GRC programs or initiatives involving audits, assessments, cybersecurity policy development, or business continuity planning and testing.
Strong program and project management skills, including the ability to establish milestones, manage dependencies, coordinate stakeholders, and drive multiple initiatives through completion.
Strong analytical and problem-solving skills, with the ability to interpret compliance, policy, and contractual requirements, evaluate evidence, identify control gaps, and provide meaningful risk analysis.
Ability to translate compliance and contractual requirements into clear control expectations, risk-based recommendations, and actionable guidance.
Ability to collaborate effectively across technical and non-technical teams and coordinate the resolution of complex compliance and risk issues.

Nice-to-haves

CISSP, CISM, or another relevant industry-recognized cybersecurity or risk management certification preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: avature
Effort: medium

Benefits

Benefits detected in the listing.

Wellness