Cybersecurity Governanace, Risk & Compliance Sr. Analyst

Marvell Technology • Austin, TX

4d • $121,490 - $182,000

About The Position

Marvell is seeking an experienced cybersecurity compliance professional to strengthen its cybersecurity governance, compliance, and assurance program. The role partners with Cybersecurity, IT, Engineering, Legal, Privacy, and business teams to translate regulatory, customer, industry, and internal security requirements into practical, sustainable controls. The analyst helps protect Marvell’s data, intellectual property, and AI-enabled capabilities while supporting the secure adoption of emerging technologies.

The position supports cybersecurity frameworks, standards, and regulatory requirements including NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other applicable requirements. It also contributes to the maturity and automation of Marvell’s broader compliance and governance capabilities, and helps the organization demonstrate trust to customers, auditors, regulators, and other stakeholders.

The role may require access to technology or software subject to U.S. export control laws and regulations. Applicants must be eligible to access export-controlled information, and some applicants may be subject to an export license review process prior to employment.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience.
• At least 6 years of experience in cybersecurity compliance, governance, risk, audit, information security, or related functions.
• Strong working knowledge and practical experience assessing and implementing controls against frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and other applicable frameworks.
• Experience supporting HIPAA compliance, including evaluating security controls associated with PHI/ePHI and familiarity with the HIPAA Security Rule and applicable administrative, physical, and technical safeguards.
• Experience supporting internal and external cybersecurity audits, regulatory assessments, customer assessments, certification activities, or similar assurance initiatives.
• Hands-on experience with control assessments, control testing, evidence management, gap analysis, remediation tracking, and audit readiness.
• Ability to interpret regulatory, industry, customer, and framework requirements and translate them into practical security controls and processes.
• Working knowledge of enterprise technology and security domains such as cloud security, identity and access management, security operations, vulnerability management, enterprise infrastructure, and IT service management.
• Demonstrated ability to identify security and compliance gaps, assess associated risk, and partner with stakeholders to implement sustainable corrective actions.
• Strong program and project management skills, including the ability to manage multiple priorities in a complex, global environment.
• Excellent written and verbal communication skills, including the ability to translate technical and regulatory concepts for technical, business, and executive audiences.
• Experience communicating cybersecurity compliance risks, findings, metrics, and program updates to leadership and key stakeholders.
• Ability to build strong cross-functional relationships and influence outcomes without direct authority.
• Experience governing cybersecurity policies, standards, and procedures, including framework alignment, periodic review cycles, content adequacy and reasonableness assessments, and stakeholder approvals.
• Applicants must be eligible to access export-controlled information as defined under applicable law; some applicants may be subject to export license review prior to employment.

Nice To Haves

• Relevant professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Lead Implementer, HCISPP, GIAC certifications, or other applicable cybersecurity, audit, privacy, or compliance credentials.
• Experience supporting cybersecurity compliance and governance programs within a large, global technology organization.
• Experience working across multiple cybersecurity, privacy, regulatory, and assurance frameworks and developing common controls that efficiently address overlapping requirements.
• Experience with GRC platforms and compliance automation, such as automated evidence collection, continuous control monitoring, workflow automation, and compliance reporting.
• Experience supporting customer security assurance, third-party risk, privacy, regulatory compliance, or similar assurance programs.
• Experience partnering with Legal and Privacy teams on security and compliance requirements involving sensitive or regulated information.
• Strong attention to detail and commitment to quality and sound risk-based decision-making.
• Self-motivated, curious, and comfortable taking ownership of complex compliance initiatives.
• Ability to work independently and collaboratively in a fast-paced, global environment.
• Strong stakeholder management, relationship-building, and influencing skills.
• Ability to move comfortably between detailed control analysis and executive-level communication.
• Continuous improvement mindset focused on making compliance processes simpler, more scalable, and more effective.
• Practical approach to cybersecurity compliance that balances risk reduction, regulatory obligations, customer expectations, and business objectives.

Responsibilities

• Lead and support cybersecurity governance, compliance, and assurance initiatives across the organization.
• Assess and validate security controls against applicable frameworks, standards, and regulatory requirements, including NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and HIPAA.
• Support HIPAA security compliance by assessing safeguards for protected health information (PHI/ePHI), identifying control gaps, maintaining documentation, and coordinating remediation.
• Coordinate and support internal audits, external assessments, customer reviews, regulatory compliance activities, and security certifications.
• Drive audit and assessment readiness through control validation, evidence collection, documentation review, and stakeholder coordination.
• Identify compliance and control gaps, evaluate risk, and work with control owners to develop practical corrective-action and remediation plans.
• Track compliance findings, control deficiencies, and remediation activities through closure, and communicate progress and risk.
• Develop and maintain cybersecurity policies, standards, procedures, control documentation, and governance processes.
• Partner with technical and business teams to ensure security controls are appropriately designed, implemented, documented, and operating effectively.
• Support customer security assurance and due diligence, including security questionnaires, compliance inquiries, and requests for security evidence.
• Monitor evolving cybersecurity regulatory, industry, and customer requirements and translate changes into program and control improvements.
• Develop compliance metrics, dashboards, and leadership reporting on program health, risk, remediation progress, and control effectiveness.
• Conduct control testing and compliance reviews to identify opportunities to strengthen, simplify, and standardize control execution.
• Collaborate with Cybersecurity, IT, Engineering, Legal, Privacy, and other business teams on security, privacy, and compliance initiatives.
• Identify opportunities to streamline and automate compliance processes, including evidence collection, control monitoring, workflow management, and reporting.
• Support strategic cybersecurity initiatives that advance governance, regulatory compliance, audit readiness, and assurance maturity.
• Promote accountability, security awareness, and practical cybersecurity best practices across the organization as a trusted compliance partner.
• Manage the lifecycle and periodic review of cybersecurity policies, standards, and procedures, including framework mapping, content adequacy and reasonableness review, stakeholder approvals, and ongoing maintenance.

Benefits

• Eligible to participate in Marvell’s bonus and equity plans, including a new-hire equity grant and annual equity refreshers.
• Employee stock purchase plan with a 2-year look back.
• Family support programs to help balance work and home life.
• Mental health resources.
• Recognition and service awards.
• Comprehensive benefits supporting financial well-being, family support, mental and physical health, and recognition.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior