Jobs at Nelnet

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead end-to-end product strategy, discovery, roadmap, and delivery for education-focused SaaS solutions. Conduct customer research, define prioritized requirements, partner with engineering and UX in Agile delivery, track product success metrics, and present strategy to leadership while exploring AI and integration opportunities to drive adoption and business outcomes.

Lead design and delivery of compliance programs (PCI DSS, GLBA, HIPAA, NIST) for campus and public-sector customers. Manage schedules, scope, evidence collection, remediation, stakeholder coordination, and customer enablement. Author governance artifacts, train staff, support vISO services, and collaborate with QSAs and engineers to ensure accurate, timely deliverables across a portfolio of customers.