Cyber Resilience Act Program Manager

JBT Marel; Aarhus; On-site; DKK 1,200,000 - 1,600,000; Full time

Job summary

JBT Marel is seeking a CRA Program Manager to lead the enterprise program ensuring compliance with the EU Cyber Resilience Act for all digital products. Reporting to the Director of Innovation Excellence, you will embed secure-by-design requirements into product development and lifecycle governance, coordinating across Engineering, IT, Legal and Compliance to protect market access.

The role focuses on governance, evidence gathering and executive updates to support timely decisions and ongoing

Qualifications

• Experience in program management for regulated cybersecurity or product lifecycle governance.
• Knowledge of EU Cyber Resilience Act requirements is advantageous.
• Experience coordinating across Engineering, IT, Legal, Compliance and Commercial functions.
• Excellent English skills, written and verbal.

Responsibilities

• Define and execute the enterprise CRA readiness roadmap across all in-scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure-by-design and security lifecycle requirements into innovation, stage-gate and product development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering for in-scope products.
• Prepare structured updates for the Innovation Council and upper management to support priorities and resourcing decisions.

Skills

Program leadership

Enterprise change

Product development

Regulatory requirements

Stakeholder mgmt

Risk escalation

Education

Engineering/Cybersecurity degree

Regulatory compliance experience

Job description

We are looking for a Cyber Resilience Act (CRA) Program Manager, reporting to our Director of Innovation Excellence

Job Summary

The CRA Program Manager leads the enterprise program to achieve and sustain compliance with the EU Cyber Resilience Act for all JBT Marel products with digital components across divisions.

Positioned within Global Innovation Excellence, the role protects EU market access, enables compliant innovation and embeds regulatory cybersecurity requirements into innovation governance, product development and lifecycle management.

Scope and Authority

The role covers the enterprise CRA readiness program across divisions and operating units, including products, software, automation, connected components and relevant lifecycle processes in scope of the regulation.

The CRA Program Manager defines the roadmap, governance, milestones, reporting structure and implementation expectations in collaboration with Innovation, Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.

The role is authorized to set readiness reporting expectations, drive adoption of required processes and standards, and elevate non‑compliance risks that may affect compliance, liability or EU market access. Final compliance accountability remains with executive leadership and divisional/product owners.

Primary Accountability

Lead enterprise CRA readiness and embed secure‑by‑design requirements into innovation, stage‑gate, product development, documentation and lifecycle processes.

Ensure all in‑scope products are assessed, remediation is governed, evidence is audit‑ready and product cybersecurity practices are aligned across divisions.

Provide clear governance, risk visibility and executive communication so leadership can make timely decisions on priorities, resources and market‑access risks.

Main tasks

• Define and execute the enterprise CRA readiness roadmap across all in‑scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure‑by‑design and security lifecycle requirements into innovation, stage‑gate and product development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering for in‑scope products.
• Align CRA requirements with design standards, technical documentation, conformity evidence and lifecycle obligations.
• Drive consistent vulnerability management, incident handling and post‑market security monitoring processes.
• Coordinate Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.
• Support divisions with practical process changes, tools, templates, ownership models and training.
• Track readiness status, risks, dependencies, resources and remediation progress across divisions and portfolios.
• Prepare structured updates for the Innovation Council and upper management to support priorities and resourcing decisions.
• Maintain audit‑ready evidence and elevate material risks that could affect compliance, liability or EU market access.

Skills and Abilities

• Strong program leadership in complex, cross‑functional and multi‑divisional environments.
• Ability to drive enterprise change and process adoption without relying only on direct authority.
• Good understanding of product development, innovation governance and lifecycle management.
• Ability to translate regulatory cybersecurity requirements into practical processes and deliverables.
• Strong stakeholder management, facilitation and executive communication skills.
• Structured, pragmatic and execution focused, with clear judgment on risk escalation and decision needs.

Education, Knowledge and Experience

• Relevant university degree, preferably within engineering, cybersecurity, computer science, industrial engineering, innovation management or a related field.
• Experience in program management, product development, cybersecurity, regulated compliance or product lifecycle governance.
• Knowledge of EU Cyber Resilience Act requirements, secure‑by‑design principles, product cybersecurity or related regulatory frameworks is an advantage.
• Experience from equipment manufacturing, industrial automation, software‑enabled products or complex B2B machinery is an advantage.
• Experience coordinating across Engineering, IT, Information Security, Legal, Compliance, Procurement, Service and Commercial functions.
• Excellent English skills, both written and verbal, and comfort working in a multi‑cultural, multi‑discipline organization.

About JBT Marel

At JBT Marel, what we do matters , we know that the contribution of our employees leads to the success of our business.

Our purpose is to transform the future of food; this guides our vision ofbeing the leading partner in solutions for a sustainable food industry. At its core, our vision emphasizes partnership, inspiring JBT Marel to deliver exceptional, end‑to‑end service that fosters customer trust.

• Our values show who we are at our best. As we Serve with integrity – Create with collaboration – Grow with excellence – Advance with innovation

• We are committed to our employees and will provide you with development and opportunities to allow you to be the best version of yourself at work, at home, and in your community.

• We foster a genuine inclusive team culture enjoying collaborative working across our global teams to deliver world‑class projects.

• We encourage development ensuring new experiences and challenges at JBT Marel to feed your growth!

• Benefits: Salary will be dependent on candidate location and profile i.e. country of residence - details relating to the amount of holiday including bank holidays, healthcare benefits, pension will be shared directly with applicants.

Questions? Contact: Maarten Krepel – [e-mail]
Learn more at: jbtmarel.com
Follow us on LinkedIn

Connect with Talent Acquisition Specialist: Maarten Krepel | LinkedIn

JBT Marel is an equal opportunity employer and values diversity in the workplace. We encourage all qualified individuals to apply.

Join us. Shape the future. Start at JBT Marel.

Join us — and be the driving force behind smarter, leaner food production.

#LI-MK1

#LI-Hybrid