Cyber Security Consultant

Consult; United Kingdom; Remote; GBP 90,000 - 120,000; Full time

Job summary

Consult is seeking a senior Cybersecurity Regulatory Affairs Consultant for a fully remote contract with a UK medical device company. The role focuses on software and cybersecurity regulatory submissions and documentation.

You will work autonomously across regulatory, software, and quality teams, translating cybersecurity needs into compliant evidence, risk management, and regulatory strategy.

Qualifications

• Regulatory affairs experience in the medical device industry.
• Experience with medical device software in regulatory contexts.
• Regulatory perspective on cybersecurity for medical devices.
• Translating cybersecurity requirements into regulatory documentation.
• Supporting regulatory submissions involving software and cybersecurity.
• Familiarity with medical device cybersecurity guidance and standards.

Responsibilities

• Provide regulatory input across medical device software and cybersecurity.
• Review cybersecurity aspects of products and related documentation.
• Advise on regulatory strategy for software and cybersecurity.
• Support regulatory submissions and technical documentation.
• Collaborate with Software, Engineering, Quality and Regulatory teams.
• Identify regulatory gaps and remediation actions.
• Provide independent specialist advice and challenge where needed.

Skills

Regulatory Affairs

Medical Device Software

Cybersecurity in Regulatory

Independent Consultancy

Cross-functional collaboration

Tools

IEC 62304

IEC 81001-5-1

IEC 14971

FDA cybersecurity guidance

Job description

Cybersecurity Regulatory Affairs Consultant

Fully Remote | UK-Based Medical Device Company | Contract

Maclivaro are working with an innovative UK-based medical device company who are looking for an experienced Cybersecurity Regulatory Affairs Consultant to provide specialist regulatory expertise across software and cybersecurity within the medical device environment.

This is a specialist contract opportunity for someone with deep, repeated experience in the regulatory aspects of medical device software and cybersecurity.

The business already has strong in-house expertise across a number of areas, so they are specifically looking for an independent consultant who can bring additional regulatory depth and specialist knowledge in software and cybersecurity.

The Role

You will provide regulatory guidance and hands‑on support relating specifically to software and cybersecurity requirements for medical devices, helping the business ensure its products, processes and documentation meet applicable regulatory expectations.

The successful consultant will have extensive experience working at the intersection of Regulatory Affairs, Software and Cybersecurity, with a strong understanding of how cybersecurity requirements translate into medical device regulatory submissions, technical documentation and compliance activities.

This is not a general cybersecurity role. We are looking for someone who has repeatedly worked on medical device cybersecurity from a regulatory perspective.

Key Responsibilities

• Provide specialist Regulatory Affairs input across medical device software and cybersecurity
• Review and assess cybersecurity aspects of medical device products and associated documentation
• Provide regulatory guidance throughout the product lifecycle
• Assess regulatory requirements relating to software and cybersecurity
• Support regulatory submissions and technical documentation where required
• Review existing processes, documentation and evidence against applicable regulatory expectations
• Identify regulatory gaps, risks and areas requiring remediation
• Advise on appropriate regulatory strategy for software and cybersecurity‑related requirements
• Work closely with Software, Engineering, Quality and Regulatory teams
• Provide independent specialist advice and challenge where required
• Support the business in ensuring cybersecurity activities are appropriately reflected within the regulatory framework

About You

We are looking for a Regulatory Affairs professional with substantial medical device software and cybersecurity experience.

Essential experience:

• Strong Regulatory Affairs experience within the medical device industry
• Significant, repeated experience with medical device software
• Significant, repeated experience with cybersecurity from a regulatory perspective
• Strong understanding of regulatory requirements relating to software‑enabled and/or connected medical devices
• Experience translating cybersecurity requirements into regulatory documentation and compliance activities
• Experience supporting regulatory submissions involving software and cybersecurity
• Strong understanding of applicable medical device cybersecurity guidance, standards and regulatory expectations
• Ability to independently assess regulatory gaps and provide practical recommendations
• Comfortable working autonomously with technical and cross‑functional teams

Particularly valuable:

• Experience with FDA cybersecurity requirements
• Experience with EU MDR / IVDR
• Experience with IEC 62304
• Experience with IEC 81001-5-1
• Experience with ISO 14971 and cybersecurity risk management
• Experience with threat modelling and cybersecurity risk assessments from a regulatory perspective
• Experience with connected, networked or software‑driven medical devices
• Previous consultancy experience

The Ideal Consultant

The ideal candidate will not simply be a cybersecurity professional who has worked alongside Regulatory Affairs.

We need someone who has personally and repeatedly dealt with the regulatory implications of medical device software and cybersecurity — someone who understands what regulators expect, what evidence needs to be generated, how it should be documented and where organisations commonly fall short.

You will be comfortable operating independently, challenging existing approaches and bringing specialist knowledge that adds genuine capability beyond the client's existing in‑house expertise.

Contract Details

Location: Fully Remote – UK

Duration: Contract

Start: ASAP

Sector: Medical Devices

Focus: Regulatory Affairs | Software | Cybersecurity | Medical Devices

Working Style: Independent Consultancy

This is an excellent opportunity for a senior Cybersecurity Regulatory Affairs Consultant to provide specialist expertise to a growing medical device business, with the potential for further consultancy work beyond the initial engagement.