Senior/Principal GRC Analyst

Responsibilities

• Architect, lead, and scale enterprise governance, risk, and compliance programs across highly regulated environments
• Own the implementation and continuous improvement of ISO/IEC 27001, ISO/IEC 42001 (AI Management), GDPR, CCPA/CPRA, and CMMC
• Define and maintain a risk-based GRC architecture aligned to NIST and privacy requirements
• Translate technical security architectures and controls into compliant policies, standards, and audit-ready evidence
• Lead enterprise, third-party, cloud, and AI-specific risk assessments
• Serve as the primary interface for auditors, regulators, customers, and partners
• Drive efficiency using GRC platforms, security telemetry, and AI-assisted compliance tooling
• Mentor junior GRC professionals and influence cross-functional teams

Requirements

• 7–12+ years of experience in GRC, security, privacy, or risk management
• Proven ownership of ISO 27001, GDPR/CCPA, and CMMC or NIST 800-171 programs
• Strong technical and regulatory interpretation skills
• Ability to operate independently at a senior or principal individual contributor level
• Deep understanding of defense-in-depth architectures, cloud security models (AWS, Azure, GCP), and data protection

Preferred Qualifications

• ISO 27001 Lead Implementer or Lead Auditor certification
• CISSP, CISA, or CRISC certifications
• Privacy certifications such as CIPM, CIPP/US, or CIPP/E
• Experience with Microsoft security and compliance platforms (Purview, Defender, Entra ID)
• Exposure to AI governance frameworks, tools, or regulations

About the Company

Altera provides leadership programmable solutions that are easy-to-use and deploy in applications from cloud to edge, offering limitless AI possibilities. Our end-to-end broad portfolio of products, including FPGAs, CPLDs, and SmartNICs, provides the flexibility to accelerate innovation and shape the future through pioneering technology.