Governance, Risk Management and Compliance, Senior Director

Astera Labs•San Jose, CA

19h•$225,000 - $250,000•Onsite

About The Position

Astera Labs is redefining connectivity for the AI era, and as we scale, we need a strategic leader to safeguard how we operate. The Senior Director, Governance, Risk Management and Compliance (GRC) will build and lead the enterprise GRC function — establishing the frameworks, controls, and culture that protect Astera Labs' people, products, data, and reputation as we grow. This is a highly visible, cross-functional role that partners with Finance, Legal, IT, Security, Engineering, and Operations to embed risk-aware decision-making across the company. You'll shape how Astera Labs manages enterprise risk, regulatory compliance, internal controls, and third-party risk during one of the most exciting growth chapters in semiconductors — enabling rack-scale AI infrastructure for the world's leading hyperscalers.

Requirements

Bachelor's degree in business, Finance, Accounting, Information Systems, or a related field
10+ years of progressive experience in governance, risk management, compliance, internal audit, or a related discipline, with 5+ years in a leadership role
Demonstrated experience building or scaling a GRC program at a public or pre-/post-IPO technology company
Strong working knowledge of SOX, ERM frameworks (e.g., COSO), and industry standards such as SOC 2, ISO 27001, or NIST
Proven ability to influence and partner with executive stakeholders across Finance, Legal, IT, Security, and business functions
Excellent written and verbal communication skills, with experience presenting to executives, auditors, and/or the Board

Nice To Haves

Advanced degree (MBA, MS) and/or professional certifications such as CPA, CIA, CISA, CRISC, or CISSP
Experience in the semiconductor, hardware, or hyper-growth technology sector
Familiarity with data privacy regulations (GDPR, CCPA) and export/trade compliance considerations
Experience implementing GRC tooling and automating controls, assessments, and reporting
Strategic thinker who thrives in fast-paced, ambiguous environments and can balance pragmatism with rigor

Responsibilities

Build, lead, and continuously mature Astera Labs' enterprise GRC program, aligned to company strategy and growth stage
Define governance structures, policies, and standards; drive executive and Board-level reporting on risk and compliance posture
Partner with Legal, Finance, IT, and Security leadership to align GRC priorities with business objectives
Design and operate the enterprise risk management (ERM) framework, including risk identification, assessment, treatment, and monitoring
Lead third-party and vendor risk management, ensuring appropriate due diligence and ongoing oversight
Establish clear risk appetite, metrics, and escalation paths across business functions
Own the internal controls program (including SOX readiness and ongoing 404 compliance) in partnership with Finance and Internal Audit
Drive compliance with applicable regulatory, industry, and customer requirements (e.g., SOC 2, ISO 27001, NIST, data privacy regulations)
Serve as primary liaison for internal and external auditors, coordinating audits, findings, and remediation
Recruit, develop, and lead a high-performing GRC team as the function scales
Champion a culture of accountability, integrity, and continuous improvement across the organization
Deliver training, awareness, and enablement programs that make risk and compliance part of how Astera Labs operates day-to-day