Senior Governance, Risk Management and Compliance Director, Astera Labs

• Bachelor's degree in business, Finance, Accounting, Information Systems, or a related field
• 10+ years of progressive experience in governance, risk management, compliance, internal audit, or a related discipline, with 5+ years in a leadership role
• Demonstrated experience building or scaling a GRC program at a public or pre-/post-IPO technology company
• Strong working knowledge of SOX, ERM frameworks (e.g., COSO), and industry standards such as SOC 2, ISO 27001, or NIST
• Proven ability to influence and partner with executive stakeholders across Finance, Legal, IT, Security, and business functions
• Excellent written and verbal communication skills, with experience presenting to executives, auditors, and/or the Board

Desirable

• Astera Labs is redefining connectivity for the AI era, and as we scale, we need a strategic leader to safeguard how we operate
• The Senior Director, Governance, Risk Management and Compliance (GRC) will build and lead the enterprise GRC function — establishing the frameworks, controls, and culture that protect Astera Labs' people, products, data, and reputation as we grow
• This is a highly visible, cross-functional role that partners with Finance, Legal, IT, Security, Engineering, and Operations to embed risk-aware decision-making across the company
• You'll shape how Astera Labs manages enterprise risk, regulatory compliance, internal controls, and third-party risk during one of the most exciting growth chapters in semiconductors — enabling rack-scale AI infrastructure for the world's leading hyperscalers
• Build, lead, and continuously mature Astera Labs' enterprise GRC program, aligned to company strategy and growth stage
• Define governance structures, policies, and standards; drive executive and Board-level reporting on risk and compliance posture
• Partner with Legal, Finance, IT, and Security leadership to align GRC priorities with business objectives
• Design and operate the enterprise risk management (ERM) framework, including risk identification, assessment, treatment, and monitoring
• Lead third-party and vendor risk management, ensuring appropriate due diligence and ongoing oversight
• Establish clear risk appetite, metrics, and escalation paths across business functions
• Own the internal controls program (including SOX readiness and ongoing 404 compliance) in partnership with Finance and Internal Audit
• Drive compliance with applicable regulatory, industry, and customer requirements (e.g., SOC 2, ISO 27001, NIST, data privacy regulations)
• Serve as primary liaison for internal and external auditors, coordinating audits, findings, and remediation
• Recruit, develop, and lead a high-performing GRC team as the function scales
• Champion a culture of accountability, integrity, and continuous improvement across the organization
• Deliver training, awareness, and enablement programs that make risk and compliance part of how Astera Labs operates day-to-day