Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA
Altera · Bengaluru
Job Details:
Job Description:
Govern and manage risk
- Own the security policy framework, risk register and exception process for the company.
- Make sure every exception has an owner, a reason and an end date.
- Produce cyber risk reporting for the CISO, executives and the board.
Manage third-party risk
- Run vendor risk assessments, from onboarding to ongoing monitoring.
- Set the rules for which suppliers need deeper review, and follow through on findings.
Keep us audit ready
- Lead SOX, ISO and customer security audits, working with internal and external auditors.
- Prepare EU AI Act compliance and AI governance with the AI Security Lab.
- Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal.
- Automate evidence collection and control monitoring, so audits reuse the same evidence.
Lead the site and the region
- Run our offshore security site, including hiring, growth and day-to-day operations.
- Act as the cybersecurity point of contact for Southeast Asia, working with local leaders and regulators.
Qualifications:
- Bachelor’s degree in a technical or business-related field, or equivalent practical experience.
- 12+ years of experience in information security, risk, or compliance.
- 5+ years of experience leading GRC (Governance, Risk, and Compliance) or third-party risk teams.
- Experience managing SOX, ISO 27001, or similar audits end-to-end.