Senior Cybersecurity Advisor – Product & IoT Security

UL Solutions External Career Site; São Paulo; On-site; BRL 180,000 - 300,000; Full time

Job summary

UL Solutions External Career Site is seeking a Senior Cybersecurity Advisor to provide customer-facing technical consultancy on cybersecurity and regulatory compliance for connected and software-enabled products across consumer IoT, industrial, automotive-adjacent, and medical technologies.

You will assess product architectures, documentation, security controls, and development practices to identify vulnerabilities and compliance gaps, translating regulations into practical remediation plans for

Qualifications

• Experience providing technical cybersecurity consultancy to customers.
• Knowledge of regulatory requirements and industry standards (CRA, RED, etc.).
• Ability to translate compliance needs into actionable remediation plans.

Responsibilities

• Assess product architectures, documentation, security controls and development practices.
• Perform cybersecurity gap assessments, risk analysis and threat modeling.
• Translate regulatory requirements into practical recommendations and remediation actions.

Skills

Client-facing communication

Regulatory standards

Threat modeling

Risk assessment

Job description

The Senior Cybersecurity Advisor provides customer-facing technical consultancy focused on the cybersecurity and regulatory compliance of connected and software-enabled products, including consumer IoT, industrial, automotive-adjacent, and medical technologies.

In this role, you will help customers understand and address cybersecurity requirements arising from regulations and standards such as the EU Cyber Resilience Act (CRA), the Radio Equipment Directive (RED), EN 18031, ETSI EN 303 645, ISA/IEC 62443, IEC 81001-5-1, and other applicable product-security frameworks.

You will assess product architectures, technical documentation, security controls, and development practices; perform cybersecurity gap assessments, risk analysis, and threat modeling; identify vulnerabilities and compliance gaps; and translate regulatory requirements into practical recommendations and remediation activities. This is a highly customer-facing advisory position combining technical cybersecurity expertise, product-security knowledge, and regulatory consulting.