GRC Certifications Engineer: ISO27001 & SOC 2 Lead

NVIDIA Corporation; Washington; Hybrid; USD 168,000 - 270,000; Full time

Job summary

NVIDIA Corporation is seeking an Information Security professional to own end-to-end certification programs, primarily ISO27001 and SOC2, while driving improvement across intake, onboarding, audit planning and maintenance. The role involves collaborating with internal teams to simplify certification effort and ensure ongoing compliance with evolving standards.

You will influence the certification roadmap, manage external assessments, and coordinate export control audits, leveraging cloud

Qualifications

• 8+ years experience developing and operating certification onboarding programs (ISO27001 and SOC 2).
• Strong working knowledge of global/regional regulations (EMEA, JAPAC, LATAM, NAM).
• Experience leading compliance audits (internal and external) and working with certification bodies.
• Familiarity with cloud security providers and governance, risk, and compliance frameworks.

Responsibilities

• Lead lifecycle planning, execution and improvement of security certifications (ISO27001, SOC2, NIST).
• Define and operate compliance and audit processes with continual workflow improvements.
• Coordinate cross-team collaboration to reduce cost and complexity of certification efforts.
• Own delivery of certification roadmap, reporting and escalations.
• Coordinate export control related continuous compliance audits.

Skills

Security certifications onboarding

Regulatory knowledge

GRC principles

Automation in security

Education

Bachelor's degree in Information Security or related field

Master’s preferred

Tools

CISSP

CISM

CISA

ISO 27001 Lead Auditor/Implementer

CMMC CPA/Assessor

NIST CSF certifications

Job description

NVIDIA Corporation is seeking an Information Security professional to own end-to-end certification programs, primarily ISO27001 and SOC2, while driving improvement across intake, onboarding, audit planning and maintenance. The role involves collaborating with internal teams to simplify certification effort and ensure ongoing compliance with evolving standards.

You will influence the certification roadmap, manage external assessments, and coordinate export control audits, leveraging cloud