Sr. Cybersecurity AI Compliance Analyst

Marvell is looking for a Sr. Cybersecurity AI Compliance Analyst to help drive security and compliance for the organization’s use of AI technologies. In this onsite role in Santa Clara, CA, you will connect emerging AI security requirements to practical internal policies, support audit readiness, and help assess the security posture of AI models, pipelines, and integrations.

What you’ll do

• Monitor and interpret emerging AI security regulations and standards, including EU AI Act security provisions, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, and ISO/IEC 27001, then translate requirements into actionable internal policies.
• Perform security reviews of AI plug-ins, agents, MCP connectors, and third-party AI APIs, including semiconductor EDA/AI design tools, before they are integrated into Marvell’s environment.
• Conduct security risk assessments and audits of AI models, pipelines, and infrastructure to identify vulnerabilities and compliance gaps.
• Plan and execute cyber security assessments and testing activities, including creating testing procedures, executing audits, documenting results, aligning findings with cross-functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
• Evaluate AI systems for exposure to adversarial threats such as prompt injection, model poisoning, data exfiltration, model extraction/theft, and evasion attacks.
• Partner with security engineering, MLOps, data science, legal, and product teams to embed security and compliance checkpoints throughout the AI development lifecycle.
• Maintain documentation for AI security governance, including threat models, risk classifications, security impact assessments, and audit trails.
• Review access controls, data handling practices, and third-party or vendor AI tools to ensure compliance with data protection and security requirements.
• Support internal and external security audits, regulatory inquiries, penetration test follow-up, and certification processes such as SOC 2 and ISO 27001.
• Develop and deliver training materials covering AI-specific security risks and compliance obligations.
• Track remediation efforts for findings and compliance issues, then report remediation status and risk posture to leadership.
• Stay current on the threat landscape, industry best practices, enforcement trends, and incident case studies related to AI security.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or equivalent experience.
• 5 to 8 years of experience in cybersecurity, IT risk management, security compliance, or a related field.
• Familiarity with AI/ML concepts, including how models are developed, trained, deployed, and integrated into production systems.
• Strong understanding of security frameworks and standards, including NIST CSF, ISO/IEC 27001, SOC 2, NIST AI Risk Management Framework, ISO/IEC 42001, and ISO/IEC 27017, plus emerging AI-specific security regulations.
• Working knowledge of common AI/ML security threats (adversarial attacks, data poisoning, model extraction, prompt injection) and general security domains such as identity and access management, network security, and data protection.
• Experience developing and maintaining a risk and controls matrix for security controls, including those focused on AI.
• Experience developing testing procedures, executing audits, documenting outcomes, aligning findings with cross-functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
• Excellent written and verbal communication skills, including the ability to explain technical security and regulatory concepts to varied audiences.
• Strong analytical skills and attention to detail.

Relevant technologies and standards

• EU AI Act, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, ISO/IEC 27001, ISO/IEC 27017, NIST CSF, SOC 2
• MCP connectors, ChatGPT, Copilot
• Export Administration Regulations (EAR)

Compensation and benefits

Expected base pay range: USD 138,840 - 208,000 per annum.

• Eligible to participate in Marvell’s bonus and equity plans, including a new hire equity grant and annual equity refreshers.
• Employee stock purchase plan with a 2-year look back.
• Family support programs.
• Robust mental health resources.
• Recognition and service awards.

Interview integrity

• Candidates are not permitted to use AI tools during interviews, including transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots.
• These tools must not be used to record, assist with, or enhance responses in any way.
• Using AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.

Export control notice

• This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR).
• Applicants must be eligible to access export-controlled information as defined under applicable law.
• Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State.
• Except for U.S. citizens, lawful permanent residents, or protected individuals defined by 8 U.S.C. 1324b(a)(3), applicants may be subject to an export license review process prior to employment.

Marvell also highlights benefits offerings built around four key pillars: financial well-being, family support, mental and physical health, and recognition.