Sr. Cybersecurity AI Compliance Analyst

Cybersecurity Jobs; Santa Clara (CA); On-site; USD 139,000 - 208,000; Full time

Benefits offered by this job

Bonus and equity plans

Employee stock purchase plan

Mental health resources

Recognition awards

Job summary

Marvell is seeking a Sr. Cybersecurity AI Compliance Analyst to drive security and compliance for AI technologies in Santa Clara, CA.

You’ll translate AI security requirements into internal policies, support audit readiness, and assess security posture of AI models, pipelines, and integrations. The role involves collaboration with security engineering, MLOps, data science, legal, and product teams to embed security checkpoints throughout the AI development lifecycle, maintain governance

Qualifications

• Bachelor’s degree or equivalent experience in cybersecurity or related field.
• 5–8 years of cybersecurity, IT risk management, or security compliance.
• Familiarity with AI/ML concepts and production deployments.
• Strong knowledge of security frameworks: NIST CSF, ISO/IEC 27001, SOC 2, NIST AI RMF, ISO/IEC 42001, ISO/IEC 27017.
• Experience developing and maintaining risk and controls matrices for AI security.
• Excellent written and verbal communication with cross-functional teams.

Responsibilities

• Monitor and interpret emerging AI security regulations and standards and translate to internal policies.
• Review AI plug-ins, agents, MCP connectors, and third-party AI APIs for security before integration.
• Conduct security risk assessments and audits of AI models and pipelines.
• Plan and execute cybersecurity assessments and testing activities and document results.
• Evaluate AI systems for adversarial threats (prompt injection, model poisoning, data exfiltration, etc.).
• Partner with security engineering, MLOps, data science, legal, and product teams to embed security checkpoints across the AI lifecycle.
• Maintain documentation for AI security governance and audit trails.
• Review access controls, data handling, and third-party AI tools for compliance.
• Support internal/external audits and regulatory inquiries (SOC 2, ISO 27001).
• Develop and deliver training on AI-specific security risks and compliance obligations.
• Track remediation efforts and report risk posture to leadership.
• Stay current on AI security threat landscape and industry best practices.

Skills

AI/ML concepts

Security frameworks

Threat modeling

Auditing & testing

Stakeholder communication

Education

Bachelor’s degree in cybersecurity/CS/IS or related field

Job description

Marvell is looking for a Sr. Cybersecurity AI Compliance Analyst to help drive security and compliance for the organization’s use of AI technologies. In this onsite role in Santa Clara, CA, you will connect emerging AI security requirements to practical internal policies, support audit readiness, and help assess the security posture of AI models, pipelines, and integrations.

What you’ll do

• Monitor and interpret emerging AI security regulations and standards, including EU AI Act security provisions, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, and ISO/IEC 27001, then translate requirements into actionable internal policies.
• Perform security reviews of AI plug‑ins, agents, MCP connectors, and third‑party AI APIs, including semiconductor EDA/AI design tools, before they are integrated into Marvell's environment.
• Conduct security risk assessments and audits of AI models, pipelines, and infrastructure to identify vulnerabilities and compliance gaps.
• Plan and execute cyber security assessments and testing activities, including creating testing procedures, executing audits, documenting results, aligning findings with cross‑functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
• Evaluate AI systems for exposure to adversarial threats such as prompt injection, model poisoning, data exfiltration, model extraction/theft, and evasion attacks.
• Partner with security engineering, MLOps, data science, legal, and product teams to embed security and compliance checkpoints throughout the AI development lifecycle.
• Maintain documentation for AI security governance, including threat models, risk classifications, security impact assessments, and audit trails.
• Review access controls, data handling practices, and third‑party or vendor AI tools to ensure compliance with data protection and security requirements.
• Support internal and external security audits, regulatory inquiries, penetration test follow‑up, and certification processes such as SOC 2 and ISO 27001.
• Develop and deliver training materials covering AI‑specific security risks and compliance obligations.
• Track remediation efforts for findings and compliance issues, then report remediation status and risk posture to leadership.
• Stay current on the threat landscape, industry best practices, enforcement trends, and incident case studies related to AI security.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or equivalent experience.
• 5 to 8 years of experience in cybersecurity, IT risk management, security compliance, or a related field.
• Familiarity with AI/ML concepts, including how models are developed, trained, deployed, and integrated into production systems.
• Strong understanding of security frameworks and standards, including NIST CSF, ISO/IEC 27001, SOC 2, NIST AI Risk Management Framework, ISO/IEC 42001, and ISO/IEC 27017, plus emerging AI‑specific security regulations.
• Working knowledge of common AI/ML security threats (adversarial attacks, data poisoning, model extraction, prompt injection) and general security domains such as identity and access management, network security, and data protection.
• Experience developing and maintaining a risk and controls matrix for security controls, including those focused on AI.
• Experience developing testing procedures, executing audits, documenting outcomes, aligning findings with cross‑functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
• Excellent written and verbal communication skills, including the ability to explain technical security and regulatory concepts to varied audiences.
• Strong analytical skills and attention to detail.

Relevant technologies and standards

• EU AI Act, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, ISO/IEC 27001, ISO/IEC 27017, NIST CSF, SOC 2
• MCP connectors, ChatGPT, Copilot
• Export Administration Regulations (EAR)

Compensation and benefits

Expected base pay range: USD 138,840 - 208,000 per annum.

• Eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers.
• Employee stock purchase plan with a 2‑year look back.
• Family support programs.
• Robust mental health resources.
• Recognition and service awards.

Interview integrity

• Candidates are not permitted to use AI tools during interviews, including transcription apps, real‑time answer generators like ChatGPT or Copilot, or automated note‑taking bots.
• These tools must not be used to record, assist with, or enhance responses in any way.
• Using AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.

Export control notice

• This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR).
• Applicants must be eligible to access export‑controlled information as defined under applicable law.
• Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State.
• Except for U.S. citizens, lawful permanent residents, or protected individuals defined by 8 U.S.C. 1324b(a)(3), applicants may be subject to an export license review process prior to employment.

Marvell also highlights benefits offerings built around four key pillars: financial well‑being, family support, mental and physical health, and recognition.