Cybersecurity Governanace, Risk & Compliance Sr. Analyst

Job description

About Marvell Marvell’s semiconductor solutions are the essential building blocks of the data infrastructure that connects our world. Across enterprise, cloud and AI, and carrier architectures, our innovative technology is enabling new possibilities. At Marvell, you can affect the arc of individual lives, lift the trajectory of entire industries, and fuel the transformative potential of tomorrow. For those looking to make their mark on purposeful and enduring innovation, above and beyond fleeting trends, Marvell is a place to thrive, learn, and lead. Your Team, Your Impact This role partners closely cross functionally to identify risks, assess security controls, and support alignment with regulatory requirements, industry standards, and internal policies. The successful candidate will help protect Marvell's data, intellectual property, and AI-enabled capabilities while supporting the secure adoption of emerging technologies. What You Can Expect As a Senior Cybersecurity Compliance & Governance Analyst, you will play a key role in strengthening Marvell’s cybersecurity governance, compliance, and assurance program. You will partner across Cybersecurity, IT, Engineering, Legal, Privacy, and business teams to translate regulatory, customer, industry, and internal security requirements into practical, sustainable controls. This role is ideal for an experienced cybersecurity compliance professional who enjoys solving complex problems, influencing cross-functional teams, improving how compliance programs operate, and helping a global organization demonstrate trust to customers, auditors, regulators, and other stakeholders. You will support cybersecurity frameworks, standards, and regulatory requirements such as NIST Cybersecurity Framework (CSF), NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other applicable requirements, while helping mature and automate Marvell’s broader cybersecurity compliance and governance capabilities. Key Responsibilities Lead and support cybersecurity governance, compliance, and assurance initiatives across the organization. Assess and validate security controls against applicable cybersecurity frameworks, standards, and regulatory requirements such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, HIPAA, and other relevant requirements. Support HIPAA security compliance, including assessing safeguards applicable to protected health information (PHI/ePHI), identifying control gaps, maintaining supporting documentation, and coordinating remediation with relevant stakeholders. Coordinate and support internal audits, external assessments, customer reviews, regulatory compliance activities, and security certifications. Drive audit and assessment readiness, including control validation, evidence collection, documentation review, and stakeholder coordination. Identify compliance and control gaps, evaluate risk, and partner with control owners to develop practical and sustainable corrective action and remediation plans. Track compliance findings, control deficiencies, and remediation activities through closure and provide clear visibility into progress and risk. Develop and maintain cybersecurity policies, standards, procedures, control documentation, and governance processes. Partner with technical and business teams to ensure security controls are appropriately designed, implemented, documented, and operating effectively. Support customer security assurance and due diligence activities, including security questionnaires, compliance inquiries, and requests for security evidence. Monitor evolving cybersecurity regulatory, industry, and customer requirements and translate changes into actionable program and control improvements. Develop meaningful compliance metrics, dashboards, and leadership reporting to communicate program health, risk, remediation progress, and control effectiveness. Conduct control testing and compliance reviews to identify opportunities to strengthen, simplify, and standardize control execution. Collaborate with Cybersecurity, IT, Engineering, Legal, Privacy, and other business teams on security, privacy, and compliance initiatives. Identify opportunities to streamline and automate compliance processes, such as evidence collection, control monitoring, workflow management, and reporting, to improve scalability and effectiveness. Support strategic cybersecurity initiatives that advance governance, regulatory compliance, audit readiness, and assurance maturity. Serve as a trusted compliance partner who promotes accountability, security awareness, and practical cybersecurity best practices across the organization. Manage the lifecycle and periodic review of cybersecurity policies, standards, and procedures, including framework mapping, content adequacy and reasonableness review, stakeholder approvals, and ongoing maintenance. What We're Looking For Requirements Bachelor’s degree in Information Technology, Cybersecurity, Information Security, Computer Science, or a related field, or equivalent relevant professional experience. 6+ years of experience in cybersecurity compliance, governance, risk, audit, information security, or related functions. Strong working knowledge and practical experience assessing and implementing controls against cybersecurity frameworks and standards such as NIST CSF, NIST SP 800-53, ISO/IEC 27001, CIS Controls, and other applicable industry or regulatory frameworks. Experience supporting HIPAA compliance, including evaluating security controls associated with PHI/ePHI and familiarity with the HIPAA Security Rule and applicable administrative, physical, and technical safeguards. Experience supporting internal and external cybersecurity audits, regulatory assessments, customer assessments, certification activities, or similar assurance initiatives. Hands-on experience with control assessments, control testing, evidence management, gap analysis, remediation tracking, and audit readiness. Ability to interpret regulatory, industry, customer, and framework requirements and translate them into practical security controls and processes. Working knowledge of enterprise technology and security domains such as cloud security, identity and access management, security operations, vulnerability management, enterprise infrastructure, and IT service management. Demonstrated ability to identify security and compliance gaps, assess associated risk, and partner with stakeholders to implement sustainable corrective actions. Strong program and project management skills with the ability to manage multiple priorities in a complex, global environment. Excellent written and verbal communication skills, including the ability to translate technical and regulatory concepts for technical, business, and executive audiences. Experience communicating cybersecurity compliance risks, findings, metrics, and program updates to leadership and key stakeholders. Ability to build strong cross-functional relationships and influence outcomes where direct authority may not exist. Experience governing cybersecurity policies, standards, and procedures, including framework alignment, periodic review cycles, content adequacy and reasonableness assessments, and stakeholder approvals. Preferred Qualifications Relevant professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Lead Implementer, HCISPP, GIAC certifications, or other applicable cybersecurity, audit, privacy, or compliance credentials. Experience supporting cybersecurity compliance and governance programs within a large, global technology organization. Experience working across multiple cybersecurity, privacy, regulatory, and assurance frameworks and developing common controls that efficiently address overlapping requirements. Experience with GRC platforms and compliance automation, such as automated evidence collection, continuous control monitoring, workflow automation, and compliance reporting. Experience supporting custo