Description
You are an accomplished information security professional with extensive experience in risk management, governance, and compliance. Your deep understanding of computer and network security, coupled with familiarity with regulatory and legal requirements, enables you to proactively identify and address vulnerabilities across complex enterprise environments.
You thrive in collaborative settings, working seamlessly with cross-functional teams such as Finance, Legal, Audit, and HR, and are adept at implementing innovative security solutions that elevate organisational posture. Your analytical mindset is matched by your critical thinking skills, allowing you to assess potential threats, evaluate risk mitigation strategies, and communicate findings clearly to executive leadership and stakeholders globally.
You are passionate about advancing risk management programs, enhancing compliance, and tracking enterprise security risks to keep pace with the ever-evolving cybersecurity landscape. Your commitment to continuous learning ensures you stay ahead of industry trends and regulatory changes, making you a valuable partner in Synopsys' growth and transformation.
You take ownership of your work, demonstrate high ethical standards, and enjoy tackling complex challenges unique to the Synopsys business and systems architecture. Your ability to translate technical concepts into actionable business solutions empowers the organisation to achieve its strategic goals securely and efficiently.
Responsibilities
- Conduct security risk assessments of suppliers, partners, and internal systems, rating risks and recommending mitigation controls.
- Identify, document, monitor, and report on risk register items, KPIs/KRIs, and security control efficacy.
- Present security risks and findings to diverse audiences, including risk owners, senior management, and global stakeholders.
- Collaborate with business groups to implement new solutions, processes, and remediate outstanding security issues.
- Work closely within the GRC team to detect potential security weaknesses and develop creative solutions tailored to Synopsys' systems architecture.
- Provide guidance on control implementations, governance frameworks, and corporate security policies.
- Conduct third-party (vendor) risk assessments and communicate requirements to internal and external partners.
- Maintain, enforce, and track the Synopsys Information Security Exception process.
- Stay current with industry, regulatory, and legal requirements relevant to security, compliance, and privacy.
Requirements
- Bachelor's degree in Computer Science, Information Systems, or a related field (or equivalent experience).
- 5-7 years of hands-on experience in information security, risk management, or compliance.
- In-depth knowledge of certification and attestation programs (ISO 27001, SOC 2 Type II, ISO 31000).
- Practical experience with security control frameworks (ISO 27001, NIST 800-53, SOC 2 Type II, NIST CSF).
- Excellent organisational skills and attention to detail, with the ability to prioritise multiple projects.
- Effective communication skills with internal/external customers, executive managers, and global teams.
- Ability to interpret compliance requirements and provide meaningful risk analysis.
Benefits
We offer a comprehensive range of health, wellness, and financial benefits to cater to your needs. Our total rewards include both monetary and non-monetary offerings. Your recruiter will provide more details about the salary range and benefits during the hiring process.