IT Infrastructure Compliance Engineer

Details

Role Overview

NVIDIA is seeking a highly motivated, technically sharp Senior IT Infrastructure Compliance Engineer to lead and execute comprehensive risk assessments across Global Manufacturing Operations and External Partner ecosystems (Tier-1 Foundries, ODMs, OSATs, and critical logistics providers). This role evaluates IT general controls, cybersecurity posture, data integrity, and operational resilience of interconnected systems linking NVIDIA to manufacturing partners.

Responsibilities

• Audit Execution & Leadership: Plan, lead, and execute complex IT and security audits focusing on manufacturing systems (MES), Product Lifecycle Management (PLM), Enterprise Resource Planning (ERP - SAP), and supply chain B2B integrations.
• Third-Party & Partner Risk Assessment: Evaluate IT risk and security posture of external manufacturing partners; assess their compliance with NVIDIA security standards, data protection protocols, and intellectual property safeguards.
• Primary On-Site IT Contact (North and South America): Serve as the primary on-site IT contact for factory users and stakeholders within the North and South America regions; coordinate with remote and global IT teams across domains including networking, storage, and applications. Manage urgent Tier-3 escalations with third-party IT vendors regarding network connectivity, servers, client systems, and production tools.
• Cybersecurity & Infrastructure Review: Audit network segmentation, access controls, APIs, and data transmission protocols enabling automated data exchange between NVIDIA and external manufacturing facilities.
• Compliance & Frameworks: Evaluate IT environments against industry frameworks (ISO 27001 / SOX) to support data privacy, financial integrity, and regulatory compliance.
• Data Integrity & Analytics: Assess accuracy and completeness of yield data, inventory reporting, and supply chain metrics flowing from partner systems into NVIDIA data warehouses; use data analytics tools to identify anomalies or control gaps.
• Reporting & Remediation: Draft clear, impactful, and actionable audit reports for executive leadership; track remediation efforts to ensure identified risks are mitigated by business owners.

Requirements

• Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).
• 8+ years of experience in IT Audit, IT Security, or Tech Risk Management, preferably within high-tech/semiconductor manufacturing companies.
• Deep understanding of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).
• Infrastructure & Network Audit Expertise: Practical familiarity with Windows/Unix server administration, virtualization, and enterprise storage systems; ability to evaluate core networking layouts—TCP/IP routing, firewall policy configurations, and protocols (DNS, DHCP, HTTPS, SSH).
• Technical Proficiencies: Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES); strong knowledge of cloud security (AWS/Azure), identity and access management (IAM).
• Certifications: CISA or CISSP is highly preferred.
• Communication: Exceptional verbal and written communication skills to articulate complex technical risks to non-technical business leaders and external vendors.
• Travel: Ability to travel domestically and internationally (up to 15–20%) for on-site partner assessments.

Ways To Stand Out

• Hands-on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.
• Proven track record auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.
• Ability to drive and engage third-party IT teams to complete tasks remotely in accordance with NVIDIA IT standards; proactive, “can-do” attitude; comfortable communicating with IT and non-IT personnel.