Cybersecurity Governanace, Risk & Compliance Sr. Analyst
Marvell Technology · Austin, TX, US
2 hours agoImpress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Cybersecurity Governanace, Risk & Compliance Sr. Analyst role.
Rezi rewrites your resume against Marvell Technology's job description. Free.

Tailor your resume to this Cybersecurity Governanace, Risk & Compliance Sr. Analyst role.
Rezi rewrites your resume against Marvell Technology's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Cybersecurity Governanace, Risk & Compliance Sr. Analyst posting at Marvell Technology — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Cybersecurity Governanace, Risk & Compliance Sr. Analyst posting at Marvell Technology — free, in seconds.
About the Role
This role partners cross-functionally to identify risks, assess security controls, and support alignment with regulatory requirements, industry standards, and internal policies. The successful candidate will help protect Marvell's data, intellectual property, and AI-enabled capabilities while supporting the secure adoption of emerging technologies.
Responsibilities
- Lead and support cybersecurity governance, compliance, and assurance initiatives across the organization.
- Assess and validate security controls against applicable cybersecurity frameworks, standards, and regulatory requirements such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other relevant requirements.
- Support HIPAA security compliance, including assessing safeguards applicable to protected health information (PHI/ePHI), identifying control gaps, maintaining supporting documentation, and coordinating remediation with relevant stakeholders.
- Coordinate and support internal audits, external assessments, customer reviews, regulatory compliance activities, and security certifications.
- Drive audit and assessment readiness, including control validation, evidence collection, documentation review, and stakeholder coordination.
- Identify compliance and control gaps, evaluate risk, and partner with control owners to develop practical and sustainable corrective action and remediation plans.
- Track compliance findings, control deficiencies, and remediation activities through closure and provide clear visibility into progress and risk.
- Develop and maintain cybersecurity policies, standards, procedures, control documentation, and governance processes.
- Partner with technical and business teams to ensure security controls are appropriately designed, implemented, documented, and operating effectively.
- Support customer security assurance and due diligence activities, including security questionnaires, compliance inquiries, and requests for security evidence.
- Monitor evolving cybersecurity regulatory, industry, and customer requirements and translate changes into actionable program and control improvements.
- Develop meaningful compliance metrics, dashboards, and leadership reporting to communicate program health, risk, remediation progress, and control effectiveness.
- Conduct control testing and compliance reviews to identify opportunities to strengthen, simplify, and standardize control execution.
- Collaborate with Cybersecurity, IT, Engineering, Legal, Privacy, and other business teams on security, privacy, and compliance initiatives.
- Identify opportunities to streamline and automate compliance processes, such as evidence collection, control monitoring, workflow management, and reporting, to improve scalability and effectiveness.
- Support strategic cybersecurity initiatives that advance governance, regulatory compliance, audit readiness, and assurance maturity.
- Serve as a trusted compliance partner who promotes accountability, security awareness, and practical cybersecurity best practices across the organization.
- Manage the lifecycle and periodic review of cybersecurity policies, standards, and procedures, including framework mapping, content adequacy and reasonableness review, stakeholder approvals, and ongoing maintenance.
Requirements
- Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience.
- 6+ years of experience in cybersecurity compliance, governance, risk, audit, information security, or related functions.
- Strong working knowledge and practical experience assessing and implementing controls against cybersecurity frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and other applicable industry or regulatory frameworks.
- Experience supporting HIPAA compliance, including evaluating security controls associated with PHI/ePHI and familiarity with the HIPAA Security Rule and applicable administrative, physical, and technical safeguards.
- Experience supporting internal and external cybersecurity audits, regulatory assessments, customer assessments, certification activities, or similar assurance initiatives.
- Hands-on experience with control assessments, control testing, evidence management, gap analysis, remediation tracking, and audit readiness.
- Ability to interpret regulatory, industry, customer, and framework requirements and translate them into practical security controls and processes.
- Working knowledge of enterprise technology and security domains such as cloud security, identity and access management, security operations, vulnerability management, enterprise infrastructure, and IT service management.
- Demonstrated ability to identify security and compliance gaps, assess associated risk, and partner with stakeholders to implement sustainable corrective actions.
- Strong program and project management skills with the ability to manage multiple priorities in a complex, global environment.
- Excellent written and verbal communication skills, including the ability to translate technical and regulatory concepts for technical, business, and executive audiences.
- Experience communicating cybersecurity compliance risks, findings, metrics, and program updates to leadership and key stakeholders.
- Ability to build strong cross-functional relationships and influence outcomes where direct authority may not exist.
- Experience governing cybersecurity policies, standards, and procedures, including framework alignment, periodic review cycles, content adequacy and reasonableness assessments, and stakeholder approvals.
Skills
- NIST Cybersecurity Framework (CSF)
- NIST SP 800-53
- ISO/IEC 27001
- CIS Controls
- HIPAA
- Cloud security
- Identity and access management
- Security operations
- Vulnerability management
- Enterprise infrastructure
- IT service management
- GRC platforms
- Compliance automation
Location
- Remote
Work Type
- Full-time
Experience Level
- Senior
- 6+ years of experience
Education Level
- Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience.
Salary/Compensations
- 121,490 - 182,000, $ per annum
Benefits
- Employee stock purchase plan with a 2-year look back
- Family support programs
- Robust mental health resources
- Recognition and service awards
- Bonus and equity plans
- New hire equity grant
- Annual equity refreshers
About the Company
- Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.
- At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.
Equal Opportunity
- All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.