Cybersecurity Governanace, Risk & Compliance Sr. Analyst — San Francisco

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities.  At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead.  Your Team, Your Impact This role partners closely cross functionally to identify risks, assess security controls, and support alignment with regulatory requirements, industry standards, and internal policies. The successful candidate will help protect Marvell's data, intellectual property, and AI-enabled capabilities while supporting the secure adoption of emerging technologies. What You Can Expect As a Senior Cybersecurity Compliance & Governance Analyst , you will play a key role in strengthening Marvell’s cybersecurity governance, compliance, and assurance program. You will partner across Cybersecurity, IT, Engineering, Legal, Privacy, and business teams to translate regulatory, customer, industry, and internal security requirements into practical, sustainable controls. This role is ideal for an experienced cybersecurity compliance professional who enjoys solving complex problems, influencing cross-functional teams, improving how compliance programs operate, and helping a global organization demonstrate trust to customers, auditors, regulators, and other stakeholders. You will support cybersecurity frameworks, standards, and regulatory requirements such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other applicable requirements , while helping mature and automate Marvell’s broader cybersecurity compliance and governance capabilities. Key Responsibilities • Lead and support cybersecurity governance, compliance, and assurance initiatives across the organization. • Assess and validate security controls against applicable cybersecurity frameworks, standards, and regulatory requirements such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other relevant requirements . • Support HIPAA security compliance , including assessing safeguards applicable to protected health information (PHI/ePHI), identifying control gaps, maintaining supporting documentation, and coordinating remediation with relevant stakeholders. • Coordinate and support internal audits, external assessments, customer reviews, regulatory compliance activities, and security certifications. • Drive audit and assessment readiness, including control validation, evidence collection, documentation review, and stakeholder coordination. • Identify compliance and control gaps, evaluate risk, and partner with control owners to develop practical and sustainable corrective action and remediation plans. • Track compliance findings, control deficiencies, and remediation activities through closure and provide clear visibility into progress and risk. • Develop and maintain cybersecurity policies, standards, procedures, control documentation, and governance processes. • Partner with technical and business teams to ensure security controls are appropriately designed, implemented, documented, and operating effectively. • Support customer security assurance and due diligence activities, including security questionnaires, compliance inquiries, and requests for security evidence. • Monitor evolving cybersecurity regulatory, industry, and customer requirements and translate changes into actionable program and control improvements. • Develop meaningful compliance metrics, dashboards, and leadership reporting to communicate program health, risk, remediation progress, and control effectiveness. • Conduct control testing and compliance reviews to identify opportunities to strengthen, simplify, and standardize control execution. • Collaborate with Cybersecurity, IT, Engineering, Legal, Privacy, and other business teams on security, privacy, and compliance initiatives. • Identify opportunities to streamline and automate compliance processes, such as evidence collection, control monitoring, workflow management, and reporting , to improve scalability and effectiveness. • Support strategic cybersecurity initiatives that advance governance, regulatory compliance, audit readiness, and assurance maturity. • Serve as a trusted compliance partner who promotes accountability, security awareness, and practical cybersecurity best practices across the organization. • Manage the lifecycle and periodic review of cybersecurity policies, standards, and procedures, including framework mapping, content adequacy and reasonableness review, stakeholder approvals, and ongoing maintenance. What We're Looking For Requirements • Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience. • 6+ years of experience in cybersecurity compliance, governance, risk, audit, information security, or related functions. • Strong working knowledge and practical experience assessing and implementing controls against cybersecurity frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and other applicable industry or regulatory frameworks . • Experience supporting HIPAA compliance , including evaluating security controls associated with PHI/ePHI and familiarity with the HIPAA Security Rule and applicable administrative, physical, and technical safeguards. • Experience supporting internal and external cybersecurity audits, regulatory assessments, customer assessments, certification activities, or similar assurance initiatives. • Hands-on experience with control assessments, control testing, evidence management, gap analysis, remediation tracking, and audit readiness . • Ability to interpret regulatory, industry, customer, and framework requirements and translate them into practical security controls and processes. • Working knowledge of enterprise technology and security domains such as cloud security, identity and access management, security operations, vulnerability management, enterprise infrastructure, and IT service management . • Demonstrated ability to identify security and compliance gaps, assess associated risk, and partner with stakeholders to implement sustainable corrective actions. • Strong program and project management skills with the ability to manage multiple priorities in a complex, global environment. • Excellent written and verbal communication skills, including the ability to translate technical and regulatory concepts for technical, business, and executive audiences. • Experience communicating cybersecurity compliance risks, findings, metrics, and program updates to leadership and key stakeholders. • Ability to build strong cross-functional relationships and influence outcomes where direct authority may not exist. • Experience governing cybersecurity policies, standards, and procedures, including framework alignment, periodic review cycles, content adequacy and reasonableness assessments, and stakeholder approvals.   Preferred Qualifications • Relevant professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Lead Implementer, HCISPP, GIAC certifications, or other applicable cybersecurity, audit, privacy, or compliance credentials . • Experience supporting cybersecurity compliance and governance programs within a large, global technology organization. • Experience working across multiple cybersecurity, privacy, regulatory, and assurance frameworks and developing common controls that efficiently address overlapping requirements. • Experience with GRC platforms and compliance automation , such as automated evidence collection, continuous control monitoring, workflow automation, and compliance reporting. • Experience supporting customer security assurance, third-party risk, privacy, regulatory compliance, or similar assurance programs. • Experience partnering with Legal and Privacy teams on security and compliance requirements involving sensitive or regulated information. Preferred Qualities • Strong attention to detail with a commitment to quality and sound risk-based decision-making. • Self-motivated, curious, and comfortable taking ownership of complex compliance initiatives. • Ability to work independently and collaboratively in a fast-paced, global environment. • Strong stakeholder management, relationship-building, and influencing skills. • Ability to move comfortably between detailed control analysis and executive-level communication. • A continuous improvement mindset with a focus on making compliance processes simpler, more scalable, and more effective . • A practical approach to cybersecurity compliance that balances risk reduction, regulatory obligations, customer expectations, and business objectives . Expected Base Pay Range (USD) 121,490 - 182,000, $ per annum The successful candidate’s starting base pay will be determined based on job-related skills, experience, qualifications, work location and market conditions. The expected base pay range for this role may be modified based on market conditions. 
This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success.
 Additional Compensation and Benefit Elements   Marvell is committed to providing exceptional, comprehensive benefits that support our employees at every stage - from internship to retirement and through life’s most important moments. Our offerings are built around four key pillars: financial well-being, family support, mental and physical health, and recognition. Highlights include an employee stock purchase plan with a 2-year look back, family support programs to help balance work and home life, robust mental health resources to prioritize emotional well-being, and a recognition and service awards to celebrate contributions and milestones. We look forward to sharing more with you during the interview process. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Any applicant who requires a reasonable accommodation during the selection process should contact Marvell HR Helpdesk at TAOps@marvell.com . Interview Integrity  To support fair and authentic hiring practices, candidates are not permitted to use AI tools (such as transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots) during interviews. These tools must not be used to record, assist with, or enhance responses in any way. Our interviews are designed to evaluate your individual experience, thought process, and communication skills in real time. Use of AI tools without prior instruction from the interviewer will result in disqualification from the hiring process. This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). As such, applicants must be eligible to access export-controlled information as defined under applicable law. Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State. Except for U.S. citizens, lawful permanent residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3), all applicants may be subject to an export license review process prior to employment. #LI-SA1