Principal IT Security Transformation & Compliance Lead (m/f/d)

Join one of the world's largest industrial security organizations and help define the security foundations of products used by millions of people worldwide.

At NXP's Competence Center Crypto & Security (CC C&S), security is at the core of everything we do. Our experts drive innovation from advanced security research and architecture to deployment in automotive, industrial, IoT, mobile, and edge processing solutions.

We are seeking a Principal IT Security Transformation & Compliance Lead to oversee security across complex IT transformation programs, ensuring that all new and updated solutions meet NXP security requirements and relevant international regulations and standards.

The role requires a goal-driven and proactive professional who can independently drive cross-functional projects, influence diverse stakeholders, and communicate risks, decisions and results clearly to senior leaders within NXP.

Your responsibilities:

• Lead security workstreams for complex IT transformation programs
• Ensure IT solutions comply with NXP security standards and applicable regulations
• Translate security and regulatory needs into clear controls and deliverables
• Drive risk assessments, security reviews, remediation, evidence collection and audit readiness
• Act as the security interface across IT, cybersecurity, legal, privacy, business and external partners
• Own the IT security certification program and coordinate related assessments
• Resolve dependencies, drive decisions and escalate material risks when needed
• Report status, risks and recommendations clearly to senior management
• Support secure AI adoption and improve NXP security governance and methods

Your Profile:

• Degree or equivalent experience in Cybersecurity, Computer Science, Information Technology or a related field
• Proven experience leading complex IT security, compliance or transformation projects in a global organisation
• Practical knowledge of NIS2, ISO/IEC 27001, the EU Cyber Resilience Act (CRA) and GDPR
• Experience with Common Criteria (ISO/IEC 15408) or GSMA SAS-UP would be an asset
• Understanding of secure development environments, IT architecture, security risk management and control implementation
• Understanding of the secure implementation and governance of AI tools in development environments
• Strong stakeholder-management and influencing skills across technical, business, legal and management functions
• Confidence communicating with senior leaders and presenting complex security topics in a clear, decision-oriented way
• Driving, result-oriented and problem-solving personality with the ability to work independently
• Very good English communication and presentation skills

Do you want to be a part of a semiconductor engine for the connected world and co-create the future?

Please note: The successful candidate may/will be responsible for security related tasks. The assignment may/will be in scope of security certifications, therefore a conscious and reliable way of working is necessary.

For applications in Gratkorn: NXP provides market competitive compensation according to the benchmarking of the electronic and semiconductor industry. Due to the Austrian Equal Treatment Act we are obligated to state the employment group of our applicable collective bargaining agreement (CBA) “Kollektivvertrag für Angestellte Gewerbe und Handwerk und in der Dienstleistung“, this position (fulltime) is graded in Employment Group IV after 2 years. Your individual experiences and expectations will be considered in the application process. Moreover, we provide attractive benefits to our employees like home office, flexible working time, meal benefits and more.

More information about NXP in Austria...

More information about NXP in Austria...