Senior IT Auditor – Manufacturing Partners

NVIDIA is the pioneer of GPU-accelerated computing. We target the world’s most demanding users - gamers, designers, and scientists. We’ve reinvented modern computer graphics, PC gaming, and accelerated computing. Our work in AI, deep learning, and self-driving cars is transforming entire industries and reshaping the world!

The NVIDIA IT Internal Audit team plays a critical role in ensuring our technology infrastructure, digital systems, and external partner integrations are secure, compliant, efficient, and resilient. As we continue to scale our global manufacturing footprint, securing our supply chain ecosystem is paramount. We are seeking a highly motivated, technically sharp Senior IT Auditor to lead and execute comprehensive risk assessments across our Global Manufacturing Operations and External Partner ecosystem (encompassing Tier-1 Foundries, ODMs, OSATs, and critical logistics providers).

In this role, you will evaluate the IT general controls, cybersecurity posture, data integrity, and operational resilience of the interconnected systems linking NVIDIA to our manufacturing partners. Acting as a trusted technical advisor, you will identify systemic risks in supply chain automation, intellectual property (IP) protection, B2B data exchanges, and shop-floor control systems, ensuring our global partner network operates securely, compliantly, and at peak efficiency.

• Audit Execution & Leadership:
  Plan, lead, and execute complex IT and security audits focusing on manufacturing systems (MES), Product Lifecycle Management (PLM), Enterprise Resource Planning (ERP - SAP), and supply chain B2B integrations.
• Third-Party & Partner Risk Assessment:
  Evaluate the IT risk and security posture of external manufacturing partners (Foundries, OSATs, and Subcontractors). Assess their compliance with NVIDIA’s security standards, data protection protocols, and intellectual property safeguards.
• Serve as the primary on-site IT contact for factory users and stakeholders within the North and South America regions, ensuring effective communication and coordination with remote and global IT teams across multiple domains (including networking, storage, and applications). Additionally, manage urgent Tier-3 escalations with third-party IT vendors regarding network connectivity, servers, client systems, and production tools.
• Cybersecurity & Infrastructure Review:
  Audit network segmentations, access controls, APIs, and data transmission protocols that facilitate automated data exchange between NVIDIA and external manufacturing facilities.
• Compliance & Frameworks:
  Evaluate IT environments against industry frameworks (ISO 27001 / SOX) to ensure data privacy, financial integrity, and regulatory compliance.
• Data Integrity & Analytics:
  Assess the accuracy and completeness of yield data, inventory reporting, and supply chain metrics flowing from partner systems into NVIDIA’s data warehouses. Use data analytics tools to identify anomalies or control gaps.
• Reporting & Remediation:
  Draft clear, impactful, and actionable audit reports for executive leadership. Track remediation efforts to ensure identified risks are effectively mitigated by business owners.

• Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).
• 8+ years of experience in IT Audit, IT Security, or Tech Risk Management, preferably within high‑tech/semiconductor manufacturing companies.
• Domain Expertise:
  Deep understanding of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).
• Technical Proficiencies:
  Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES). Strong knowledge of cloud security (AWS/Azure), identity and access management (IAM).
• Certifications:
  
  Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) is highly preferred.
• Communication:
  Exceptional verbal and written communication skills, with the ability to articulate complex technical risks…