Governance, Risk, and Compliance Certifications Engineer

NVIDIA Corporation; Northern (KY); Hybrid; USD 168,000 - 270,000; Full time

Benefits offered by this job

Equity

Inclusive workplace

Job summary

NVIDIA Corporation in Santa Clara, CA seeks a Governance, Risk, and Compliance Certifications Engineer to own end-to-end security certifications (ISO 27001, SOC 2, NIST). You will lead planning, execution, and improvements, coordinating with internal teams to streamline processes while safeguarding brand integrity.

We value 8+ years of governance/ GRC experience, cloud security familiarity, and multiple certifications.

Qualifications

• 8+ years experience developing and operating certification onboarding programs (ISO 27001 and SOC 2).
• Strong working knowledge of global and regional regulations (EMEA, JAPAC, LATAM, NAM).
• Proven track record leading compliance audits with internal/external bodies.
• Hands-on with GRC concepts and automation implementations.
• Certifications: CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer, CMMC, NIST CSF.
• Familiarity with cloud security providers (AWS, Azure, GCP).
• Bachelor’s degree in Information Security/IT/Compliance or equivalent; Master’s preferred.

Responsibilities

• Lead the lifecycle including planning, execution and improvement of security certifications (ISO 27001, SOC 2, NIST 800 series).
• Define, implement and operate compliance and audit processes, improving certification workflows.
• Drive collaboration with internal teams to reduce cost and complexity of certification efforts.
• Manage certification request triage & prioritization
• Oversee audit onboarding, preparation and external assessment
• Own delivery of certification roadmap including reporting & escalations
• Coordinate export control related continuous compliance audits
• Recommend and implement continuous improvements for process efficiency and evolving standards.

Skills

ISO 27001

SOC 2

NIST 800 series

GRC principles

Automation

Cloud security

Certification onboarding

Education

CISSP

CISM

CISA

ISO 27001 Lead Auditor/Implementer

CMMC Lead/Assessor

Bachelor’s degree in Information Security/IT/Compliance

Master’s preferred

Tools

AWS

Azure

Google Cloud

Job description

Governance, Risk, and Compliance Certifications Engineer page is loaded## Governance, Risk, and Compliance Certifications Engineerlocations: US, WA, Remotetime type: Full timeposted on: Posted Yesterdayjob requisition id: JR2027088We're seeking a dedicated Information Security professional to join our team in Santa Clara, CA. The candidate will have experience in end to end ownership of one or more security certifications and can demonstrate implemented improvements to the process. This includes operating and improving intake, prioritization, onboarding, audit planning, audit preparation, audit execution and certification maintenance. In addition, this role will elevate our security certification processes, ensuring compliance and safeguarding NVIDIA's brand integrity. If you have a passion for security frameworks and optimizing processes, this opportunity is for you!Join us!**What you'll be doing:*** Lead the lifecycle including planning, execution and improvement of security certifications, including but not limited to ISO27001, SOC2 and NIST 800 series.* Define, implement and operate compliance and audit processes, continuously improving certification workflows.* Drive collaboration with internal teams to reduce the cost and complexity of certification efforts* Drive certification request triage & collaborate prioritization* Manage audit onboarding, preparation and external assessment* Own delivery of certification roadmap including reporting & escalations* Coordinate export control related continuous compliance audits* Recommend and implement continuous improvements for process efficiency and compliance with evolving standards.**What we need to See:*** Ability to interpret and integrate security frameworks into organizational processes* 8+ years experience developing and operating certification onboarding programs (e.g., leading both ISO 27001 and SOC 2 simultaneously).* Strong working knowledge of global and regional regulations (EMEA, JAPAC, LATAM, NAM)* Consistent track record of leading compliance audits, including internal audits, external audits, and interactions with certification bodies.* Working knowledge of GRC principles and hands on automation implementation* Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), ISO 27001 Lead Auditor/Implementer, CMMC Certified Professional or Assessor, NIST Cybersecurity Framework certifications or equivalent training.* Familiarity with cloud security providers (e.g., AWS, Azure, or Google Cloud compliance).* Bachelor's degree in Information Security, IT, Compliance, or a related field, or equivalent experience (Master's preferred).* Demonstrated ability to improve audit processes including evidence collection, re-use and stakeholder engagement* Working knowledge of certifications and their applicability to hardware, software, cloud and enterprise scopes.**Ways to stand out from the crowd:*** Big 4 or equivalent assessment / advisory experience* Past experience with mergers and acquisitions* Working knowledge of export controls including but not limited to ITAR / EAR / ACS IFR* A resume which clearly demonstrates your impact in relevant rolesYour base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 168,000 USD - 270,250 USD.You will also be eligible for equity and .Applications for this job will be accepted at least until October 6, 2026.This posting is for an existing vacancy.NVIDIA uses AI tools in its recruiting processes.NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.