We’re seeking a dedicated Information Security professional to join our team in Santa Clara, CA. The candidate will have experience in end to end ownership of one or more security certifications and can demonstrate implemented improvements to the process. This includes operating and improving intake, prioritization, onboarding, audit planning, audit preparation, audit execution and certification maintenance. In addition, this role will elevate our security certification processes, ensuring compliance and safeguarding NVIDIA’s brand integrity. If you have a passion for security frameworks and optimizing processes, this opportunity is for you.
What you’ll be doing:
Lead the lifecycle including planning, execution and improvement of security certifications, including but not limited to ISO27001, SOC2 and NIST 800 series.
Define, implement and operate compliance and audit processes, continuously improving certification workflows.
Drive collaboration with internal teams to reduce the cost and complexity of certification efforts
Drive certification request triage & collaborate prioritization
Manage audit onboarding, preparation and external assessment
Own delivery of certification roadmap including reporting & escalations
Coordinate export control related continuous compliance audits
Recommend and implement continuous improvements for process efficiency and compliance with evolving standards.
What we need to see:
Ability to interpret and integrate security frameworks into organizational processes
Previous experience developing and operating certification onboarding programs
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ISO 27001 Lead Auditor/Implementer, CMMC Certified Professional or Assessor, NIST Cybersecurity Framework certifications or equivalent training.
Experience with multiple certifications (e.g., leading both ISO 27001 and CMMC simultaneously).
Familiarity with cloud security providers (e.g., AWS, Azure, or Google Cloud compliance).
Working knowledge of certifications and their applicability to hardware, software, cloud and enterprise scopes.
12+ years in information security, compliance overseeing compliance programs or certification lifecycles.
Hands-on experience leading or supporting end-to-end certification processes, including scoping, implementation, audits, and renewals.
Consistent track record of leading compliance audits, including internal audits, external audits, and interactions with certification bodies.
Bachelor's degree in Information Security, IT, Compliance, or a related field, or equivalent experience (Master’s preferred).
Ways to stand out from the crowd:
Big 4 or equivalent assessment / advisory experience
Past experience with mergers and acquisitions
Working knowledge of export controls including but not limited to ITAR / EAR / ACS IFR
Advanced skills in data analytics or visualization tools (e.g., Tableau, Power BI) for reporting compliance metrics.
Working knowledge of GRC principles and hands on implementation
NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and passionate people on the planet working for us. If you're creative and autonomous, we want to hear from you!
Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 192,000 USD - 304,750 USD.You will also be eligible for equity and benefits.
Top Skills
What We Do
NVIDIA’s invention of the GPU in 1999 sparked the growth of the PC gaming market, redefined modern computer graphics, and revolutionized parallel computing. More recently, GPU deep learning ignited modern AI — the next era of computing — with the GPU acting as the brain of computers, robots, and self-driving cars that can perceive and understand the world. Today, NVIDIA is increasingly known as “the AI computing company.”
