Principal Product Security Architect

Arm Limited; Cambridge; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Relocation package

Visa sponsorship

Accommodation assistance

Job summary

Arm Limited is seeking a Product Security Regulatory Compliance Engineer to translate evolving cybersecurity regulations into scalable engineering requirements across products and SDL.

The role focuses on EU CRA, NIS2, UK PSTI, and OpenSSF, collaborating with Engineering, Legal, Compliance and Product Management to ensure compliant, secure product development.

Relocation support is available, and Arm promotes inclusive recruitment; hybrid working patterns vary by role.

Qualifications

• Strong understanding of product security regulations and standards.
• Experience applying SDL and product security assurance.
• Ability to translate legal/regulatory text into technical requirements.
• Experience collaborating with engineering, legal and compliance teams.

Responsibilities

• Translate regulations and standards into product and engineering requirements.
• Lead regulatory risk assessments and gap analyses.
• Develop policies and processes to align with security regulations.
• Embed regulatory requirements into Arm's SDL.
• Collaborate with engineering and product teams to integrate compliance.
• Support incident response planning and regulatory reporting.
• Drive alignment of regulatory and certification requirements.
• Create guidance and training for CRA and related regs.
• Represent Arm in industry regulatory and standardisation activities.

Skills

Regulatory compliance

Product security

SDL (Secure Development Lifecycle)

Threat modelling

Incident response

Regulatory advocacy

Cross-functional collaboration

Tools

ISO 21434

IEC 62443

PSA Certification

OpenSSF

Job description

Job Overview

We're looking for a Product Security Regulatory Compliance Engineer to join our Product Security team, helping Arm translate emerging cybersecurity regulations and standards into actionable, scalable engineering solutions.

With a particular focus on the EU Cyber Resilience Act (CRA), alongside other global regulatory obligations, the role will help integrate regulatory requirements across Arm's products, engineering practices and Secure Development Lifecycle (SDL).

Working across Engineering, Product Management, Security, Legal and Compliance, the role will help Arm meet evolving product security requirements while supporting innovation and trust. It will also represent Arm in international standards and regulatory working groups, contributing to the development of industry approaches to product security!

Responsibilities

This role will help shape Arm's response to the evolving product security regulatory landscape, providing subject matter expertise and helping teams apply new requirements in practice.

The role includes monitoring, evaluating and interpreting emerging product security regulations, including the EU Cyber Resilience Act (CRA), NIS2 and U.S. cybersecurity labelling requirements, while providing subject matter expertise on security-related regulatory obligations.

Working across Product Security, Engineering, Architecture, Legal, Compliance, Quality and Functional Safety, the role will:

• Translate cybersecurity regulations and standards into clear product and engineering requirements.
• Lead regulatory risk assessments and gap analyses, identifying actions needed to meet evolving product security obligations.
• Develop and implement policies, frameworks and processes that support product alignment with security regulations.
• Embed regulatory requirements and Secure-by-Design practices into Arm's Secure Development Lifecycle (SDL).
• Partner with engineering and product teams to integrate compliance requirements throughout product development.
• Support incident response planning and regulatory reporting obligations.
• Drive alignment of regulatory, contractual and certification requirements across relevant teams.
• Develop guidance, training and mentorship to support the practical application of the CRA and other product security regulations.
• Represent Arm in relevant industry, regulatory and standardisation activities.

What we're looking for

What will help you succeed in this role?

This role requires a strong understanding of product security regulations, standards and their associated communities, including the EU CRA, ENISA, UK PSTI, BSI, NIS2 and OpenSSF.

We're looking for experience with Security Development Lifecycles and product security assurance, including requirements management, threat modelling, security testing and incident response. The ability to interpret legal and regulatory text and translate it into actionable technical and engineering requirements is also important.

The role involves collaborating across multidisciplinary engineering teams and communicating complex regulatory and security topics clearly to different audiences. We also value experience in regulatory advocacy, industry working groups or standards development.

Nice to have

We'd welcome experience in one or more of the following areas:

• Security of embedded systems, semiconductors or software supply chains.
• Low-level software or hardware development and architecture.
• Security standards and assurance schemes including ISO 21434, IEC 62443, SESIP and PSA Certified.
• Semiconductor technologies, including SoCs, processor IP or Compute Subsystems.
• Cybersecurity standardisation or regulatory engagement.

Additional Information

Please note that a relocation package (including visa sponsorship support) is available for this role, for candidates who require it.

We're committed to providing an inclusive recruitment experience. If you need an adjustment or accommodation during the recruitment process, please let us know.

Our 10x Mindset

At Arm, we believe progress happens when people are empowered to think bigger and push beyond what seems possible. Our 10x mindset is about curiosity, ambition and creating impact that will be used by millions. We learn fast, prioritise collaboration and turn bold ideas into real technology. We look for people who are inspired by this way of working and want to grow in an environment where bold ideas are welcomed. Discover how the 10x mindset shapes life at Arm: https://careers.arm.com/10x-mindset

Use of AI in Your Application

At Arm, we embrace the benefits AI can bring, including in recruitment. You may use AI to support your preparation, such as improving the clarity of written responses, practicing interview questions, or learning more about our industry. However, your application and interview responses must reflect your own thinking, experience, and abilities. We want to understand your authentic perspective, creativity, and approach to problem solving. As such, you may not use AI to complete assigned tasks as part of any assessments. If you plan to use AI-supported or assistive technologies as part of a reasonable adjustment, please contact [e-mail] so we can support you.

Recruitment Adjustments and Accommodations

At Arm, we want to build extraordinary teams. If you need an adjustment or an accommodation during the recruitment process, please email [e-mail]. To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation or adjustment requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud, or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.

Hybrid Working

Arm's approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team’s needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.

Equal Opportunities

Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don’t discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.