JobCubby JobCubby
Sign up
Altera

Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA

Altera Bengaluru, Karnataka, India

Technology, Information and Internet · 501-1,000 employees

Oct 22
security Principal (10+ yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The role involves governing the company's security policy framework, managing risk registers, and overseeing third-party vendor risk assessments. Additionally, the director will lead regional security operations in Southeast Asia and ensure audit readiness for standards like SOX and ISO.

What they look for

Cybersecurity Governance Risk Management Compliance Third-party Risk Management Security Policy Framework Vendor Risk Assessment SOX Compliance ISO 27001 Audit Management EU AI Act AI Governance EU CRA PSIRT Leadership

Requirements

Candidates must possess a bachelor's degree in a technical or business field and at least 12 years of experience in information security, risk, or compliance. A minimum of 5 years of leadership experience in GRC or third-party risk management is required.

Full description

Job Details:

Job Description:

Govern and manage risk

  • Own the security policy framework, risk register and exception process for the company.
  • Make sure every exception has an owner, a reason and an end date.
  • Produce cyber risk reporting for the CISO, executives and the board.

Manage third-party risk

  • Run vendor risk assessments, from onboarding to ongoing monitoring.
  • Set the rules for which suppliers need deeper review, and follow through on findings.

Keep us audit ready

  • Lead SOX, ISO and customer security audits, working with internal and external auditors.
  • Prepare EU AI Act compliance and AI governance with the AI Security Lab.
  • Supply the governance evidence for secure development and the EU CRA, alongside PSIRT and Legal.
  • Automate evidence collection and control monitoring, so audits reuse the same evidence.

Lead the site and the region

  • Run our offshore security site, including hiring, growth and day-to-day operations.
  • Act as the cybersecurity point of contact for Southeast Asia, working with local leaders and regulators.

Qualifications:

  • Bachelor’s degree in a technical or business-related field, or equivalent practical experience.
  • 12+ years of experience in information security, risk, or compliance.
  • 5+ years of experience leading GRC (Governance, Risk, and Compliance) or third-party risk teams.
  • Experience managing SOX, ISO 27001, or similar audits end-to-end.

Job Type:

Regular

Shift:

Shift 1 (India)

Primary Location:

Bengaluru, Karnataka, India

Additional Locations:

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

Similar roles