Senior IT Auditor – Contract Manufacturing Partners

NVIDIA•Us, CA

About The Position

NVIDIA's IT Internal Audit team is crucial for ensuring the security, compliance, efficiency, and resilience of our technology infrastructure, digital systems, and external partner integrations. As NVIDIA expands its global manufacturing operations, securing the supply chain ecosystem is a top priority. This role involves leading and executing risk assessments for Global Manufacturing Operations and the External Partner ecosystem, including foundries, ODMs, OSATs, and logistics providers. The Senior IT Auditor will assess IT general controls, cybersecurity, data integrity, and operational resilience of systems connecting NVIDIA with its manufacturing partners. The position acts as a technical advisor, identifying risks in supply chain automation, IP protection, B2B data exchanges, and shop-floor control systems to ensure the partner network operates securely and efficiently.

Requirements

Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).
8+ years of experience in IT Audit, IT Security, or Tech Risk Management, preferably within high-tech/semiconductor manufacturing companies.
Deep understanding of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).
Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES).
Strong knowledge of cloud security (AWS/Azure), identity and access management (IAM).
Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) is highly preferred.
Exceptional verbal and written communication skills, with the ability to articulate complex technical risks to non-technical business leaders and external vendors.
Ability to travel domestically and internationally (up to 15-20%) to conduct on-site partner assessments when required.

Nice To Haves

Hands-on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.
A proven track record of auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.
Ability to drive and engage third-party IT teams to complete tasks remotely in accordance with NVIDIA IT standards.
Energetic, proactive, and possessing a strong “can-do” attitude; comfortable communicating with both IT and non-IT personnel.

Responsibilities

Plan, lead, and execute complex IT and security audits focusing on manufacturing systems (MES), Product Lifecycle Management (PLM), Enterprise Resource Planning (ERP - SAP), and supply chain B2B integrations.
Evaluate the IT risk and security posture of external manufacturing partners (Foundries, OSATs, and Subcontractors).
Assess partner compliance with NVIDIA’s security standards, data protection protocols, and intellectual property safeguards.
Serve as the primary on-site IT contact for factory users and stakeholders in North and South America.
Ensure effective communication and coordination with remote and global IT teams across multiple domains (networking, storage, applications).
Manage urgent Tier-3 escalations with third-party IT vendors regarding network connectivity, servers, client systems, and production tools.
Audit network segmentations, access controls, APIs, and data transmission protocols for automated data exchange between NVIDIA and external manufacturing facilities.
Evaluate IT environments against industry frameworks (ISO 27001 / SOX) to ensure data privacy, financial integrity, and regulatory compliance.
Assess the accuracy and completeness of yield data, inventory reporting, and supply chain metrics from partner systems.
Use data analytics tools to identify anomalies or control gaps.
Draft clear, impactful, and actionable audit reports for executive leadership.
Track remediation efforts to ensure identified risks are effectively mitigated by business owners.