Governance, Risk, and Compliance Certifications Engineer

Details

We’re seeking a dedicated Information Security professional to own and improve security certification processes. The role includes managing intake, prioritization, onboarding, audit planning, audit preparation, audit execution, and certification maintenance. It will also elevate security certification processes, ensure compliance, and help safeguard NVIDIA’s brand integrity.

Responsibilities

• Lead the lifecycle of security certifications, including planning, execution, and continuous improvement for certifications such as ISO 27001, SOC 2, and the NIST 800 series.
• Define, implement, and operate compliance and audit processes while continuously improving certification workflows.
• Collaborate with internal teams to reduce the cost and complexity of certification efforts.
• Triage certification requests and collaborate on prioritization.
• Manage audit onboarding, preparation, and external assessments.
• Own delivery of the certification roadmap, including reporting and escalations.
• Coordinate export-control-related continuous compliance audits.
• Recommend and implement process improvements for efficiency and compliance with evolving standards.

Requirements

• Ability to interpret and integrate security frameworks into organizational processes.
• 8+ years of experience developing and operating certification onboarding programs, such as leading ISO 27001 and SOC 2 simultaneously.
• Strong working knowledge of global and regional regulations across EMEA, JAPAC, LATAM, and NAM.
• Consistent track record of leading internal and external compliance audits and interacting with certification bodies.
• Working knowledge of GRC principles and hands-on automation implementation.
• One or more relevant certifications or equivalent training, such as CISSP, CISM, CISA, ISO 27001 Lead Auditor or Implementer, CMMC Certified Professional or Assessor, or NIST Cybersecurity Framework certifications.
• Familiarity with cloud security providers, including AWS, Azure, or Google Cloud compliance.
• Bachelor’s degree in Information Security, IT, Compliance, or a related field, or equivalent experience; a master’s degree is preferred.
• Demonstrated ability to improve audit processes, including evidence collection, evidence reuse, and stakeholder engagement.
• Working knowledge of certifications and their applicability to hardware, software, cloud, and enterprise scopes.

Preferred Qualifications

• Big Four or equivalent assessment or advisory experience.
• Experience with mergers and acquisitions.
• Working knowledge of export controls, including ITAR, EAR, and ACS IFR.
• A resume that clearly demonstrates impact in relevant roles.

Compensation and Benefits

• Base salary range: USD 168,000–270,250 per year.
• Eligible for equity and benefits.
• NVIDIA is an equal opportunity employer committed to an inclusive work environment.