Senior Information Security Compliance Lead

Who We Are

Applied Materials is the global leader in materials science and engineering solutions that are at the foundation of virtually every new semiconductor chip and advanced display in the world. The equipment that we create and service is essential to advancing AI and accelerating the commercialization of next-generation semiconductor chips. Join us and push the boundaries of materials science and engineering in a company at the foundation of the electronics industry. The work we do together advances the world's technology.

What We Offer

Location:

You'll benefit from a supportive work culture that encourages you to learn, develop, and grow your career as you take on challenges and drive innovative solutions for our customers. We empower our team to push the boundaries of what is possible-while learning every day in a supportive leading global company. Visit our Careers website to learn more.

At Applied Materials, we care about the health and wellbeing of our employees. We're committed to providing programs and support that encourage personal and professional growth and care for you at work, at home, or wherever you may go. Learn more about our .

Job Summary

The Senior Information Security Compliance Lead is responsible for leading enterprise-wide cybersecurity compliance, governance, and assurance programs. This role oversees the implementation, maintenance, assessment, and continual improvement of information security frameworks, including ISO/IEC 27001, SOC 2 Type II, and Cybersecurity Maturity Model Certification (CMMC).

The successful candidate will partner with Information Security, IT, Legal, Privacy, Internal Audit, and business stakeholders to ensure regulatory, contractual, and industry compliance requirements are effectively implemented and monitored. The role serves as a key compliance advisor for audits, risk management, customer assurance activities, and security governance initiatives.

Key Responsibilities

• Lead enterprise cybersecurity compliance programs, including ISO 27001, SOC 2 Type II, CMMC, NIST Cybersecurity Framework, and related security standards.
• Develop, maintain, and improve information security policies, standards, procedures, and control frameworks.
• Perform gap assessments, risk assessments, and control maturity evaluations.
• Drive remediation efforts and track closure of audit findings and compliance gaps.
• Establish governance metrics, dashboards, and executive reporting.

• Lead external certification audits and surveillance audits for ISO 27001.
• Manage SOC 2 Type II readiness, control testing, evidence collection, and auditor coordination.
• Lead CMMC readiness and certification initiatives, including control implementation and assessment preparation.
• Conduct internal audits and coordinate cross-functional audit activities.
• Manage third-party assessors, auditors, and certification bodies.

• Maintain and improve the Information Security Management System (ISMS).
• Ensure compliance with contractual, customer, regulatory, and industry requirements.
• Support customer security assessments, questionnaires, and external compliance reviews.
• Partner with control owners to ensure effective design and operation of security controls.
• Monitor emerging regulatory and cybersecurity compliance requirements.

• Partner with Legal, Privacy, Internal Audit, Engineering, Infrastructure, and Business teams.
• Provide guidance on compliance obligations and security control requirements.
• Present compliance status, risks, and audit results to senior leadership and executive stakeholders.
• Lead compliance awareness and training initiatives across the organization.

• Identify opportunities to automate compliance monitoring and evidence collection.
• Benchmark cybersecurity compliance practices against industry standards and best practices.
• Drive process improvements to enhance audit readiness and operational efficiency.

Required Qualifications

• 10-15+ years of experience in Information Security, Cybersecurity Governance, Risk & Compliance (GRC), Audit, or related fields.
• 7+ years leading enterprise cybersecurity compliance programs.
• Hands-on experience managing:
  • ISO/IEC 27001 certification programs
  • SOC 2 Type II audits
  • CMMC readiness and certification
  • NIST Cybersecurity Framework assessments
  • Internal and external audit programs
• Experience interacting with executive leadership, external auditors, and customers.
• Experience managing global compliance initiatives across multiple business units and regions.

• ISO/IEC 27001 Lead Auditor (Required)
• Certified Information Systems Auditor (CISA) (Preferred)
• Certified Information Systems Security Professional (CISSP) (Preferred)
• SOC 2 Auditor certification or equivalent audit experience (Preferred)
• CMMC Certified Professional (CCP), CMMC Certified Assessor (CCA), or equivalent CMMC qualification (Preferred)

• Deep understanding of:
  • ISO/IEC 27001:2022
  • SOC 2 Trust Services Criteria
  • CMMC 2.0
  • NIST 800-171
  • NIST Cybersecurity Framework (CSF)
  • Risk Management methodologies
  • Third-Party Risk Management
  • Security governance and policy management
• Strong audit, analytical, and problem-solving skills.
• Excellent communication and executive presentation skills.
• Proven ability to influence stakeholders without direct authority.

Education

• Bachelor's degree in Information Security, Computer Science, Information Systems, Cybersecurity, Engineering, or related field.

Success Measures

• Successful maintenance of ISO 27001 certification.
• Successful completion of SOC 2 Type II audits with minimal findings.
• Achievement of CMMC certification readiness objectives.
• Reduction in audit findings and remediation cycle times.
• Improved compliance maturity and control effectiveness across the enterprise.

Additional Information

Time Type:

Employee Type:

Travel:

Relocation Eligible:

Applied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.