IT Infrastructure Compliance Engineer

NVIDIA is the pioneer of GPU-accelerated computing. We target the world’s most demanding users - gamers, designers, and scientists. We’ve reinvented modern computer graphics, PC gaming, and accelerated computing. Our work in AI, deep learning, and self-driving cars is transforming entire industries and reshaping the world!

The NVIDIA IT Infrastructure Compliance team plays a critical role in ensuring our technology infrastructure, digital systems, and external partner integrations are secure, compliant, efficient, and resilient. As we continue to scale our global manufacturing footprint, securing our supply chain ecosystem is paramount. We are seeking a highly motivated, technically sharp Senior IT Infrastructure Compliance Engineer to lead and execute comprehensive risk assessments across our Global Manufacturing Operations and External Partner ecosystem (encompassing Tier-1 Foundries, ODMs, OSATs, and critical logistics providers). In this role, you will evaluate the IT general controls, cybersecurity posture, data integrity, and operational resilience of the interconnected systems linking NVIDIA to our manufacturing partners. Acting as a trusted technical advisor, you will identify systemic risks in supply chain automation, intellectual property (IP) protection, B2B data exchanges, and shop-floor control systems, ensuring our global partner network operates securely, compliantly, and at peak efficiency.

What You Will Be Doing:

• Audit Execution & Leadership: Plan, lead, and execute complex IT and security audits focusing on manufacturing systems (MES), Product Lifecycle Management (PLM), Enterprise Resource Planning (ERP - SAP), and supply chain B2B integrations.

• Third-Party & Partner Risk Assessment: Evaluate the IT risk and security posture of external manufacturing partners (Foundries, OSATs, and Subcontractors). Assess their compliance with NVIDIA’s security standards, data protection protocols, and intellectual property safeguards.

• Serve as the primary on-site IT contact for factory users and stakeholders within the North and South America regions, ensuring effective communication and coordination with remote and global IT teams across multiple domains (including networking, storage, and applications). Additionally, manage urgent Tier-3 escalations with third-party IT vendors regarding network connectivity, servers, client systems, and production tools.

• Cybersecurity & Infrastructure Review: Audit network segmentations, access controls, APIs, and data transmission protocols that facilitate automated data exchange between NVIDIA and external manufacturing facilities.

• Compliance & Frameworks: Evaluate IT environments against industry frameworks (ISO 27001 / SOX) to ensure data privacy, financial integrity, and regulatory compliance.

• Data Integrity & Analytics: Assess the accuracy and completeness of yield data, inventory reporting, and supply chain metrics flowing from partner systems into NVIDIA’s data warehouses. Use data analytics tools to identify anomalies or control gaps.

• Reporting & Remediation: Draft clear, impactful, and actionable audit reports for executive leadership. Track remediation efforts to ensure identified risks are effectively mitigated by business owners.

What We Need To See:

• Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).

• 8+ years of experience in IT Audit, IT Security, or Tech Risk Management, preferably within high-tech/semiconductor manufacturing companies.

• Domain Expertise: Deep understanding of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).

• Infrastructure & Network Audit Expertise: Solid hands-on exposure or practical familiarity with Windows/Unix server administration, virtualization, and enterprise storage systems. Ability to evaluate core networking layouts — specifically TCP/IP routing, firewall policy configurations, and common protocols (DNS, DHCP, HTTPS, SSH) — to independently verify system security and compliance controls.

• Technical Proficiencies: Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES). Strong knowledge of cloud security (AWS/Azure), identity and access management (IAM).

• Certifications: Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) is highly preferred.

• Communication: Exceptional verbal and written communication skills, with the ability to articulate complex technical risks to non-technical business leaders and external vendors.

• Travel: Ability to travel domestically and internationally (up to 15-20%) to conduct on-site partner assessments when required.

Ways To Stand Out From The Crowd:

• Hands-on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.

• A proven track record of auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.

• Ability to drive and engage third-party IT teams to complete tasks remotely in accordance with NVIDIA IT standards. Energetic, proactive, and possessing a strong “can-do” attitude; comfortable communicating with both IT and non-IT personnel

NVIDIA is widely considered to be one of the technology world’s most desirable employers. We have some of the most forward-thinking and hardworking people in the world working for us. If you're creative and autonomous, we want to hear from you!

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 168,000 USD - 264,500 USD.Applications for this job will be accepted at least until July 21, 2026.

This posting is for an existing vacancy. 

NVIDIA uses AI tools in its recruiting processes.

NVIDIA is committed to fostering an inclusive work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.