Director, Global Cybersecurity GRC & Third-Party Risk Management (TPRM) SEA
Altera (company site, opens in a new tab)12+ yrsBengaluruOn-siteDirect career pageEst. 30–45 LPA
Posted 15h ago
Reach people at Altera
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Altera you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own and govern the company’s security policy framework, risk register, and exception management processes with accountability for ownership and timelines.
- Manage third-party risk program including vendor risk assessments from onboarding through ongoing monitoring, enforcing assessment criteria and follow-up on findings.
- Lead audit readiness and compliance efforts for SOX, ISO, customer security audits, EU AI Act, and EU CRA by coordinating with auditors and automating evidence collection; oversee cybersecurity operations and engagement in Southeast Asia region.
Minimum Requirements
- Bachelor’s degree in a technical or business-related field, or equivalent practical experience.
- 12+ years of experience in information security, risk, or compliance.
- 5+ years of experience leading Governance, Risk, and Compliance (GRC) or third-party risk teams.
- Experience managing SOX, ISO 27001, or equivalent audits end-to-end.
Ideal Candidate Profile
- Experienced in running cybersecurity risk and compliance frameworks with demonstrated ownership of risk registers and control exceptions.
- Proven ability to manage third-party risk programs and lead complex audit preparation and compliance for multiple standards including emerging regulations like EU AI Act.
- Senior leader capable of managing regional cybersecurity operations and acting as a primary liaison with business leaders and regulators in Southeast Asia.