Senior Technical Program Manager, US Federal Compliance and FSO

Hungry, Humble, Honest, with Heart.

The Opportunity

Nutanix, Inc. is seeking a senior-level Technical Program Manager, US Federal Compliance and FSO to lead our National Industrial Security Program and serve as a strategic partner for our evolving U.S. Federal business. This role blends rigorous security governance with business enablement; ensuring Nutanix maintains sound governance in adherence to the National Industrial Security Program Operating Manual (NISPOM/32 CFR §117) and providing expert guidance to company stakeholders in order to strengthen customer trust, interface with prime contractors and government customers, and accelerate the delivery of a best in class National Industrial Security Program.

Federal agencies are elevating expectations for security rigor and delivery readiness. At Nutanix, industrial security is central to how we win, deliver, and maintain trust. This role places the FSO at the intersection of security leadership, business enablement, and mission success—empowering Nutanix to protect national interests while delivering innovative technology solutions.

About the Team

This role will function as a critical compliance arm within the Nutanix legal department, reporting to the Director of Cybersecurity Legal. The legal organization at Nutanix functions as a critical business partner and an organizational change agent; embracing innovative business models, pioneering service delivery, and the adoption of technology to assist ​both our internal and external clients with world-class service delivery. The team is collaborative and cross-functional; working closely with business stakeholders such as sales, revenue operations, security, engineering, product management, and the executive leadership team. 

Your Role

The Senior Technical Program Manager and FSO will be a critical partner for our US Federal and Defense Customer programs and ensuring our ongoing compliance and technology innovation to cater to this customer segment.  This role will also require expertise in enterprise risk management or cyber risk management for US public companies as well as a background in areas such as cybersecurity, GRC, third party risk/supply chain risk, compliance frameworks & auditing, and the implementation of regulatory compliance.

Serve as the Nutanix FSO of record and primary liaison with the Defense Counterintelligence and Security Agency (DCSA).

• Administer and modernize all aspects of the National Industrial Security Program Operating Manual (NISPOM) compliance (32 CFR Part 117), SEADs, Intelligence Community Directives (ICDs) and related Nutanix policies.
• Lead US government and internal assessments, including audits, internal self‑inspections, and continuous Defense Counterintelligence and Security Agency (DCSA) readiness.
• Ensure ongoing program compliance and operations for KMP, ITPSO, program contributors, and Insider Threat Working Group.
• Collaborate with designated Nutanix personnel to ensure that required programs are continually surveilled and maintained in accordance with NISPOM requirements. (Nutanix Insider Threat Program (ITP), Quality Management Program (QMP), TCP, ECP, safeguarding classified and CUI information, etc.)
• Act as trusted expert for the SMO and ensure an open, streamlined and timely communication channel.
• Manage DD254s and subcontractor/partner security requirements.
• Administer DISS, NISS, NBIS, Scattered Castles, and personnel security workflows.

 FOCI Mitigation & Governance

• Lead Company efforts to maintain ongoing operations to prevent, detect, and mitigate Foreign Ownership, Control or Influence (FOCI)
• Manage Nutanix’s Foreign Ownership, Control or Influence (FOCI) mitigation agreement under a Special Board Resolution (SBR).
• Serve as primary industrial security advisor to the Board of Directors.
• Prepare Board materials, maintain minutes, and coordinate annual certifications.
• Ensure ongoing Board compliance with SBR obligations and required reporting.

 Personnel Security (PERSEC)

• Oversee end‑to‑end clearance lifecycle, including SF‑86 reviews, adjudication, indoctrination, and debriefs.
• Manage PERSEC requirements established by DoD, IC, and other government stakeholders.
• Communicate notifications and updates to PERSEC requirements to impacted internal stakeholders and manage any operational changes these require.

 Security Education & Awareness

• Develop and deliver Security Education, Training, and Awareness (SETA) programs including FOCI-specific training and Electronic Communications Plan (ECP) briefings.
• Provide tailored training for employees, executives, and program teams participating or supporting the NISP program.

 US Federal Business Enablement

• Partner with Federal Sales, Legal, Security, and Compliance teams to embed security early in capture and proposal cycles.
• Develop compelling security narratives for proposals and customer briefings.
• Shape compliance matrices, win themes, and customer‑aligned security messaging.
• Provide guidance on FCL timelines, cleared staffing strategies, and security expectations.
• Assess competitor security posture and articulate Nutanix’s differentiators.

 Program Delivery & Execution

• Ensure Day‑1 classified program readiness, including access, onboarding, facility preparation, and secure operations.
• Partner with Security, Legal, Compliance, and Information Technology system owners to align information security, product security, and cross‑functional initiatives with NISPOM requirements.
• Set and deliver policy and system-based requirements to inform information owners and facilitate the classification and safeguarding of in-scope data, and ongoing program compliance.

What You Will Bring

• Active TS/SCI (Polygraph required or ability to obtain immediately).
• 7–10+ years leading industrial security programs (FSO, AFSO, Director Level Security Leader or CPSO/CISO with oversight of a NISP program).
• Deep knowledge of NISPOM, SEADs, ICD 704/705, ITP management, DD254 administration and DCSA assessments.
• Direct experience with security incident response program operations and reporting requirements aligned to regulation.
• Proven experience managing FOCI mitigation, specifically a Special Board Resolution.
• Extensive experience with DISS, NISS, NBIS, Scattered Castles.
• Demonstrated ability to scope, lead, and operationalize large, scalable east-west compliance programs 
• Exceptional communication, writing, briefing, and executive‑level engagement skills.
• Completion of FSO Program Management training.

 Preferred Qualifications

• Experience supporting DoD, IC, or national security customers.
• Familiarity with CMMC, DFARS 7012/7019/7020, Zero Trust, and CUI requirements.
• Familiarity with trade compliance and export control programs for technology vendors
• Background in information security, IT systems implementation, secure engineering/development, and sensitive program operations.
• Ability to operate autonomously in a fast‑moving, growth‑oriented environment.

Work Arrangement

Hybrid: This role operates in a hybrid capacity, blending the benefits of remote work with the advantages of in-person collaboration. In locations where our workplace policy applies (i.e. San Jose, Durham, Mexico City, Bangalore, Pune, Hoofddorp, Belgrade, Barcelona, Singapore, Sydney and Tokyo), employees are expected to work onsite a minimum of 3 days per week to foster collaboration, team alignment, and access to in-office resources. Workplace type may vary based on location and team requirements. Please speak with your recruiter for details. Additional team-specific guidance and norms will be provided by your manager.

The pay range for this position at commencement of employment is expected to be between USD $ 182,400 and USD $ 364,800 per year.

However, base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements, including a sign-on bonus, restricted stock units, and discretionary awards in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as vacation, sick time, and parental leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employee will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. Our application deadline is 40 days from the date of posting. In good faith, the posting may be removed prior to this date if the position is filled or extended in good faith.

--