Senior Technical Program Manager, DGX Cloud Security

NVIDIA is seeking a Senior Technical Program Manager to lead the Infrastructure and Product Security and Compliance program for DGX Cloud. In this role, you will ensure our platforms and partner ecosystem meet the highest standards of trust, resilience, and governance.

As a Senior TPM focused on Cloud Security, you will own the design and execution of a DGXC-wide infrastructure security program that strengthens how DGXC operates with Cloud Service Providers (CSPs) and NVIDIA Cloud Partners (NCPs). You will drive security initiatives by embedding compliance controls, governance frameworks, and best practices across infrastructure, platform, and product teams. This role also ensures Product Security is integrated into product roadmap planning and the software development lifecycle, aligning product and infrastructure priorities. You will work closely with senior leaders and cross-functional teams in Security, Compliance, DevOps, and Engineering to continuously enhance and scale the DGX Cloud Security Posture.

What You’ll Be Doing:

• Lead alignment across engineering, product, security, and partner teams to deliver against cloud security guidelines with CSP and NCP partners.

• Drive programs that strengthen vulnerability management, access control, patching, and compliance readiness for SOC 2, ISO 27001, and related certifications.

• Operate DGXC-wide security engineering forums and processes, establishing security KPIs, dashboards, and “run safe” SRE practices.

• Partner with the CISO organization to define and assess emerging cloud providers against DGX Cloud security requirements, driving measurable improvements and action plans.

• Implement and evolve security controls frameworks (e.g., SSH hardening, IAM, secret rotation) in CI/CD pipelines to ensure continuous compliance.

• Lead certification readiness and audit cycles, including SOC 2 Type 1 & 2 and ISO 27001, from control mapping through evidence collection and remediation.

• Chair the DGX Cloud Security & Compliance Working Group, managing governance reviews, risk dashboards, and executive reporting on posture and metrics.

• Develop training programs to build security and compliance awareness across Product, DevOps, and Engineering teams.

• Create playbooks and automation frameworks that streamline certification renewals, patching cycles, and vulnerability management workflows.

• Maintain and continuously improve technical compliance documentation, including system diagrams, process flows, and control mappings.

What We Need to See:

• 12+ years of Program Management experience driving the planning and execution of large programs, software engineering projects in a fast paced environment.

• Consistent track record delivering successful Security, Risk, and/or Compliance programs, particularly in cloud IaaS and SaaS environments, resulting in full certification of a suite of products and services.

• Experience leading efforts related to SOC2 (Type 1 and Type 2) audits and readiness, including leading control implementation (e.g., access controls, change management, vulnerability management).

• Experience operationalizing vulnerability management, patch management, SSH key governance, and access controls across distributed systems.

• Ability to think strategically and tactically and to build consensus in making programs successful; ability to resolve technical issues and resource constraints across cross-functional teams.

• Demonstrated ability to define metrics, dashboards, and risk indicators that measure posture improvement and audit readiness.

• Proficiency with tools like JIRA, to comfortably guide engineering teams on execution in an Agile/scrum manner and ensure accurate governance artifacts are delivered.

• Excellent executive communication and presentation skills  able to distill complex technical and compliance topics for senior leadership

• MS EE or CS degree, or equivalent experience.

Ways to Stand Out from the Crowd:

• Highly motivated with strong interpersonal skills, with proven track record to work successfully with multi-functional teams and coordinate effectively across organizational boundaries and geographies.

• Experience implementing security features in a multi-cloud environment.

• Experience with sophisticated compliance programs, such as FedRamp, SCO2, or ISO certification efforts.

• Solid understanding of tier 1 cloud technologies (AWS, GCP, Azure, OCI).

• Experience with productivity tools and process automation.

We have some of the most forward-thinking and hardworking people in the world working for us and, due to outstanding growth, our best-in-class engineering teams are growing fast. NVIDIA is widely considered to be one of the industry's most desirable employers. NVIDIA is at the center of Deep Learning, Artificial Intelligence, and Autonomous Vehicles. If you're looking for a challenge, thrives in an ambiguous environment and shares our passion for technology, we want to hear from you. We are looking for phenomenal people to help us accelerate the next wave of artificial intelligence.

Your base salary will be determined based on your location, experience, and the pay of employees in similar positions. The base salary range is 192,000 USD - 304,750 USD.Applications for this job will be accepted at least until November 16, 2025.

NVIDIA is committed to fostering a diverse work environment and proud to be an equal opportunity employer. As we highly value diversity in our current and future employees, we do not discriminate (including in our hiring and promotion practices) on the basis of race, religion, color, national origin, gender, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by law.