Cybersecurity Analyst Jobs

About The Position

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience.
• At least 6 years of experience in cybersecurity compliance, governance, risk, audit, information security, or related functions.
• Strong working knowledge and practical experience assessing and implementing controls against frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and other applicable frameworks.
• Experience supporting HIPAA compliance, including evaluating security controls associated with PHI/ePHI and familiarity with the HIPAA Security Rule and applicable administrative, physical, and technical safeguards.
• Experience supporting internal and external cybersecurity audits, regulatory assessments, customer assessments, certification activities, or similar assurance initiatives.
• Hands-on experience with control assessments, control testing, evidence management, gap analysis, remediation tracking, and audit readiness.
• Ability to interpret regulatory, industry, customer, and framework requirements and translate them into practical security controls and processes.
• Working knowledge of enterprise technology and security domains such as cloud security, identity and access management, security operations, vulnerability management, enterprise infrastructure, and IT service management.
• Demonstrated ability to identify security and compliance gaps, assess associated risk, and partner with stakeholders to implement sustainable corrective actions.
• Strong program and project management skills, including the ability to manage multiple priorities in a complex, global environment.
• Excellent written and verbal communication skills, including the ability to translate technical and regulatory concepts for technical, business, and executive audiences.
• Experience communicating cybersecurity compliance risks, findings, metrics, and program updates to leadership and key stakeholders.
• Ability to build strong cross-functional relationships and influence outcomes without direct authority.
• Experience governing cybersecurity policies, standards, and procedures, including framework alignment, periodic review cycles, content adequacy and reasonableness assessments, and stakeholder approvals.
• Applicants must be eligible to access export-controlled information as defined under applicable law; some applicants may be subject to export license review prior to employment.

Nice To Haves

• Relevant professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Lead Implementer, HCISPP, GIAC certifications, or other applicable cybersecurity, audit, privacy, or compliance credentials.
• Experience supporting cybersecurity compliance and governance programs within a large, global technology organization.
• Experience working across multiple cybersecurity, privacy, regulatory, and assurance frameworks and developing common controls that efficiently address overlapping requirements.
• Experience with GRC platforms and compliance automation, such as automated evidence collection, continuous control monitoring, workflow automation, and compliance reporting.
• Experience supporting customer security assurance, third-party risk, privacy, regulatory compliance, or similar assurance programs.
• Experience partnering with Legal and Privacy teams on security and compliance requirements involving sensitive or regulated information.
• Strong attention to detail and commitment to quality and sound risk-based decision-making.
• Self-motivated, curious, and comfortable taking ownership of complex compliance initiatives.
• Ability to work independently and collaboratively in a fast-paced, global environment.
• Strong stakeholder management, relationship-building, and influencing skills.
• Ability to move comfortably between detailed control analysis and executive-level communication.
• Continuous improvement mindset focused on making compliance processes simpler, more scalable, and more effective.
• Practical approach to cybersecurity compliance that balances risk reduction, regulatory obligations, customer expectations, and business objectives.

Responsibilities

• Lead and support cybersecurity governance, compliance, and assurance initiatives across the organization.
• Assess and validate security controls against applicable frameworks, standards, and regulatory requirements, including NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and HIPAA.
• Support HIPAA security compliance by assessing safeguards for protected health information (PHI/ePHI), identifying control gaps, maintaining documentation, and coordinating remediation.
• Coordinate and support internal audits, external assessments, customer reviews, regulatory compliance activities, and security certifications.
• Drive audit and assessment readiness through control validation, evidence collection, documentation review, and stakeholder coordination.
• Identify compliance and control gaps, evaluate risk, and work with control owners to develop practical corrective-action and remediation plans.
• Track compliance findings, control deficiencies, and remediation activities through closure, and communicate progress and risk.
• Develop and maintain cybersecurity policies, standards, procedures, control documentation, and governance processes.
• Partner with technical and business teams to ensure security controls are appropriately designed, implemented, documented, and operating effectively.
• Support customer security assurance and due diligence, including security questionnaires, compliance inquiries, and requests for security evidence.
• Monitor evolving cybersecurity regulatory, industry, and customer requirements and translate changes into program and control improvements.
• Develop compliance metrics, dashboards, and leadership reporting on program health, risk, remediation progress, and control effectiveness.
• Conduct control testing and compliance reviews to identify opportunities to strengthen, simplify, and standardize control execution.
• Collaborate with Cybersecurity, IT, Engineering, Legal, Privacy, and other business teams on security, privacy, and compliance initiatives.
• Identify opportunities to streamline and automate compliance processes, including evidence collection, control monitoring, workflow management, and reporting.
• Support strategic cybersecurity initiatives that advance governance, regulatory compliance, audit readiness, and assurance maturity.
• Promote accountability, security awareness, and practical cybersecurity best practices across the organization as a trusted compliance partner.
• Manage the lifecycle and periodic review of cybersecurity policies, standards, and procedures, including framework mapping, content adequacy and reasonableness review, stakeholder approvals, and ongoing maintenance.

Benefits

• Eligible to participate in Marvell’s bonus and equity plans, including a new-hire equity grant and annual equity refreshers.
• Employee stock purchase plan with a 2-year look back.
• Family support programs to help balance work and home life.
• Mental health resources.
• Recognition and service awards.
• Comprehensive benefits supporting financial well-being, family support, mental and physical health, and recognition.