Senior Director, Governance, Risk Management and ComplianceLocation: San Jose, CA
Role OverviewAstera Labs is redefining connectivity for the AI era, and as we scale, we need a strategic leader to safeguard how we operate. The Senior Director, Governance, Risk Management and Compliance (GRC) will build and lead the enterprise GRC function - establishing the frameworks, controls, and culture that protect Astera Labs' people, products, data, and reputation as we grow.
This is a highly visible, cross-functional role that partners with Finance, Legal, IT, Security, Engineering, and Operations to embed risk-aware decision-making across the company. You'll shape how Astera Labs manages enterprise risk, regulatory compliance, internal controls, and third-party risk during one of the most exciting growth chapters in semiconductors - enabling rack-scale AI infrastructure for the world's leading hyperscalers.
Key Responsibilities- Governance & Program Leadership
- Build, lead, and continuously mature Astera Labs' enterprise GRC program, aligned to company strategy and growth stage
- Define governance structures, policies, and standards; drive executive and Board-level reporting on risk and compliance posture
- Partner with Legal, Finance, IT, and Security leadership to align GRC priorities with business objectives
- Risk Management
- Design and operate the enterprise risk management (ERM) framework, including risk identification, assessment, treatment, and monitoring
- Lead third-party and vendor risk management, ensuring appropriate due diligence and ongoing oversight
- Establish clear risk appetite, metrics, and escalation paths across business functions
- Compliance & Controls
- Own the internal controls program (including SOX readiness and ongoing 404 compliance) in partnership with Finance and Internal Audit
- Drive compliance with applicable regulatory, industry, and customer requirements (e.g., SOC 2, ISO 27001, NIST, data privacy regulations)
- Serve as primary liaison for internal and external auditors, coordinating audits, findings, and remediation
- Team & Culture
- Recruit, develop, and lead a high-performing GRC team as the function scales
- Champion a culture of accountability, integrity, and continuous improvement across the organization
- Deliver training, awareness, and enablement programs that make risk and compliance part of how Astera Labs operates day-to-day
Basic Qualifications- Bachelor's degree in business, Finance, Accounting, Information Systems, or a related field
- 10+ years of progressive experience in governance, risk management, compliance, internal audit, or a related discipline, with 5+ years in a leadership role
- Demonstrated experience building or scaling a GRC program at a public or pre-/post-IPO technology company
- Strong working knowledge of SOX, ERM frameworks (e.g., COSO), and industry standards such as SOC 2, ISO 27001, or NIST
- Proven ability to influence and partner with executive stakeholders across Finance, Legal, IT, Security, and business functions
- Excellent written and verbal communication skills, with experience presenting to executives, auditors, and/or the Board
Preferred Qualifications- Advanced degree (MBA, MS) and/or professional certifications such as CPA, CIA, CISA, CRISC, or CISSP
- Experience in the semiconductor, hardware, or hyper-growth technology sector
- Familiarity with data privacy regulations (GDPR, CCPA) and export/trade compliance considerations
- Experience implementing GRC tooling and automating controls, assessments, and reporting
- Strategic thinker who thrives in fast-paced, ambiguous environments and can balance pragmatism with rigor
Salary range is $225,000 to $250,000 depending on experience, level, and business need. This role may be eligible for discretionary bonus, incentives and benefits.
