131 applicants

Company

Original Job Post

Synopsys Inc · 3 days ago

Information Security Senior Risk Analyst

Durham, NC

Full-time

Onsite

Senior Level

$137K/yr - $205K/yr

10+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Electronic Design Automation (EDA)Information Services

H1B Sponsorship

Insider Connection @Synopsys Inc

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Provide input and refine the overall Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

Create and execute a risk management program to identify and manage financial, security, technology, personnel, and operational risks that may affect Synopsys.

Develop, enhance, operationalize enterprise-level security, risk and governance policies, processes, and controls to mitigate risk and comply with applicable laws and regulations as well as industry certifications.

Implement and manage an Information Security enterprise risk register and provide visibility and reporting to the executive management.

Implement, enhance, and risk assessment processes, risk acceptance processes and risk exception processes and reporting.

Aid and assist with the implementation and ongoing activities of a Risk Review Board for a cross-functional team.

Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.

Complete ownership and responsibility to answer customer security questionnaires and client required governance information. Coordinate, conduct and function as primary contact for all internal and external audits.

Identify, track, monitor and report on risk controls and all applicable requirements. Provide recommendations to stakeholders when appropriate.

Proactively identify opportunities for process automation through use of analytics and automation and partnering with different team members on execution to improve and innovate the Risk program methodology to become more efficient and effective.

Identify root cause and opportunities for improvement of internal controls and acquire consensus on remediation / management action plans with key business partners (IT Operations, Product, Information Security, and Internal Audit teams).

Serves as a mentor to provide risk management education and consultation to other junior members of the Risk Management team.

Assist with special projects as needed, with the ability to work in a fast-paced, ever-changing environment.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Technology GRCRisk ManagementISO27001NISTNIST800-SOC1/TISAXSOXGDPROrganizational SkillsAttention to DetailMultitasking

Required

Has 10+ years of experience in relevant Technology GRC functions related to risk management. Preferably at a financial, technology or SaaS familiar with regulated industries

Has a deep understanding of risk management methodologies, frameworks, and principles (e.g., ISO27001, NIST, NIST800-53, SOC1/2, TISAX, SOX, GDPR, etc.) to evaluate and recommend best approach to mitigating risk with best-in-class controls

Strong organizational skills with attention to detail and ability to multitask for project prioritization

Benefits

Health

Wellness

Financial benefits

Company

Synopsys Inc

Glassdoor

4.0

Catalyzing the era of pervasive intelligence, Synopsys delivers trusted and comprehensive silicon to systems design solutions, from electronic design automation to silicon IP and system verification and validation.

Founded in 1986

Mountain View, California, USA

10,001+ employees

http://www.synopsys.com

H1B Sponsorship

Synopsys Inc has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Trends of Total Sponsorships

2023 (121)

2022 (207)

2021 (227)

2020 (193)