Senior Customer Trust Governance & Assurance Manager

Nutanix; San Jose (CA); On-site; USD 180,000 - 230,000; Full time

Job summary

Nutanix is seeking a Senior Customer Trust Governance & Assurance Manager to advance customer trust practices across security, privacy, product compliance, and AI governance. The role leads complex assessments, maintains trust assets, and partners with Legal, Sales, Product Security, and Privacy to ensure accurate, defendable representations for customers and regulators.

The role emphasizes scalable processes, stakeholder collaboration, and proactive risk management to support strategic

Qualifications

• 7+ years of experience in cybersecurity, GRC, technology regulatory compliance/governance, technology risk, framework based compliance, or related fields.
• Experience supporting complex enterprise customer security assessments and customer due diligence activities including working knowledge of GRC portals and third party risk processes.
• Direct experience leading programs for cybersecurity and compliance frameworks such as NIST, US and Global public sector frameworks, SOC, ISO, CSA Star, SIG maintenance, and a strong aptitude for learning regulatory requirements or new frameworks.

Responsibilities

• Maintain operations and strategy for Customer Trust led initiatives and operations (e.g., maintenance of a SIG).
• Partner with stakeholders to identify, assess, and communicate the business impact of evolving customer assurance requirements, cybersecurity expectations, and emerging regulatory obligations.
• Maintain and improve customer-facing customer trust assets, including approved content, evidence packages, attestations, and trust-center materials.
• Lead complex customer security and compliance assessments, including questionnaires, evidence reviews, findings responses, and customer assurance discussions.
• Review customer-facing security, privacy, compliance, and AI governance representations for accuracy, consistency, supportability, and alignment with approved certifications, attestations, policies, and control documentation.
• Develop scalable processes, knowledge resources, and operating procedures to improve customer trust operations.
• Manage outsourced customer trust analyst enablement, quality review, and continuous improvement efforts for outsourced assessment support.
• Support strategic customer opportunities and complex diligence activities and partner with multiple Nutanix teams to coordinate cross-functional responses.
• Track and communicate trends, recurring customer requirements, operational metrics, and areas for process improvement.
• Partner with Sales, Legal, Product Security, Information Security, Privacy, Customer Support, and other stakeholders to support customer trust requirements.

Skills

Cybersecurity experience

GRC

Regulatory compliance

Risk management

Stakeholder communication

Program leadership

Audits & assessments

Education

Bachelor's degree in information technology, cybersecurity, risk management, or equivalent

Tools

GRC portals

Vendor management tools

Job description

The Senior Customer Trust Governance & Assurance Manager will support Nutanix's Customer Trust program by maintaining and evolving customer due diligence assets, proactively monitoring evolving customer and regulatory requirements applicable to Nutanix’s ability to participate in the global marketplace, and helping to operationalize and scale customer trust operations. The role combines system and software security expertise, customer-assurance experience, and strong program leadership to ensure Nutanix’s security, privacy, product compliance, and AI governance representations for external stakeholders remain accurate, supportable, consistent and aligned with evolving customer, industry, and regulatory expectations.

The position partners closely with Information Security, Product Security, Sales, Customer Support, Privacy, Legal, Product Compliance, and other stakeholders to strategize on and support customer diligence activities, strategic transactions and Customer Trust Center operations.

Key Responsibilities

• Maintain operations and strategy for Customer Trust led initiatives and operations (e.g., maintenance of a SIG).
• Partner with stakeholders to identify, assess, and communicate the business impact of evolving customer assurance requirements, cybersecurity expectations, and emerging regulatory obligations.
• Maintain and improve customer-facing customer trust assets, including approved content, evidence packages, attestations, and trust-center materials.
• Lead complex customer security and compliance assessments, including questionnaires, evidence reviews, findings responses, and customer assurance discussions.
• Review customer-facing security, privacy, compliance, and AI governance representations for accuracy, consistency, supportability, and alignment with approved certifications, attestations, policies, and control documentation.
• Develop scalable processes, knowledge resources, and operating procedures to improve customer trust operations.
• Manage outsourced customer trust analyst enablement, quality review, and continuous improvement efforts for outsourced assessment support.
• Support strategic customer opportunities and complex diligence activities and partner with multiple Nutanix teams to coordinate cross-functional responses.
• Track and communicate trends, recurring customer requirements, operational metrics, and areas for process improvement.
• Partner with Sales, Legal, Product Security, Information Security, Privacy, Customer Support, and other stakeholders to support customer trust requirements.

Required Qualifications

• 7+ years of experience in cybersecurity, GRC, technology regulatory compliance/governance, technology risk, framework based compliance, or related fields.
• Experience supporting complex enterprise customer security assessments and customer due diligence activities including working knowledge of GRC portals and third party risk processes.
• Direct experience leading programs for cybersecurity and compliance frameworks such as NIST, US and Global public sector frameworks, SOC, ISO, CSA Star, SIG maintenance, and a strong aptitude for learning regulatory requirements or new frameworks.
• Experience in leading or executing technical assessments or internal audits for a major compliance effort.
• Ability to evaluate security documentation, certifications, policies, audit materials, and supporting evidence and translate these into controls applicable to customer requirements.
• Build, maintain, and communicate detailed reporting and present findings to support decision-making and strategy.
• Actively make recommendations for opportunities to collaborate more efficiently, scale processes using existing tools and systems, and own responsibility for implementing these solutions to help yield higher sales velocity, internal productivity, quality, and cost savings.
• Ability to clearly identify, explain, and communicate progress, status, expectations, dependencies, and risks to executives, business partners and team members.
• Excellent written and oral communication skills, as well as strong interpersonal and communication skills.
• Experience working in a large, complex enterprise and partnering with Security, Legal, Privacy, Product and other stakeholders on commercial transactions.

Preferred Qualifications

• U.S. Citizen or U.S. National with the ability to obtain and maintain a U.S. security clearance if required to support government, defense, or other security-sensitive customer opportunities.
• Bachelor's degree in information technology, cybersecurity, risk management, or equivalent work experience.
• Experience working in a large technology company that sells IT infrastructure or security products and/or services.
• Experience reviewing security and information technology contract terms.
• Direct experience technology system implementation and/or security for on premise and hosted systems.
• Experience supporting regulated industries such as financial services, healthcare, public sector, or critical infrastructure.
• CISSP, CIPT, CompTIA, or similar certifications.
• Experience owning the management of GRC/Compliance tools, trust-center content, and vendor management.