Senior Product Security Compliance Architect

About the role

NVIDIA is looking for a proactive, highly technical Senior Product Security Compliance Architect to join its Networking product security team. You will bridge system engineering, legal frameworks, and security execution to embed global cybersecurity regulations into hardware, firmware, and software development pipelines.

Key responsibilities

• Translate global cybersecurity regulations into actionable technical specifications and engineering rules.
• Architect and scale Secure Product Development Lifecycle (Secure PLC) workflows across hardware, firmware, and software projects.
• Lead end‑to‑end security certifications and audits, coordinating with lab evaluators and engineering teams.
• Build hands‑on automation frameworks and AI‑driven workflows to streamline compliance tracking, evidence collection, and security verification.
• Partner with hardware, software, product management, and legal teams to provide technical authority on product security architecture and compliance readiness.

Required profile

• Extensive mastery of secure product and system development lifecycle frameworks and risk management standards.
• BSc/MSc in Computer Science, Computer Engineering, Electrical Engineering or equivalent with 5+ years in security engineering or product security governance.
• Deep expertise in secure development practices, threat modeling, and risk engineering for hardware and software.
• Ability to analyze system architectures, low‑level firmware, and codebases to ensure technical implementations meet governance mandates.
• Proven experience leading hardware, firmware, or software products through third‑party security evaluations and certifications.
• Hands‑on coding and automation skills, including building scripts, AI workflows, and tooling for complex security tasks.
• Strong communication and collaboration skills to drive alignment across multidisciplinary technical teams.

Required skills

• Secure Development Lifecycle (SDL) implementation
• Threat modeling and risk engineering
• Hardware/firmware security analysis
• Automation scripting and AI workflow development
• Cryptographic validation (e.g., FIPS 140‑3, Common Criteria)
• Compliance automation and regulatory mapping