Read more: Cyber Security Associate

Conformance Limited; United Kingdom; On-site; GBP 35,000 - 55,000; Full time

Job summary

Conformance Limited is seeking a Cyber Security Associate to join its cybersecurity and compliance consultancy team in the United Kingdom. You will work with manufacturers, technology companies and product developers to demonstrate compliance with evolving product cybersecurity legislation and international standards.

You will review technical evidence, identify compliance gaps and support clients through conformity assessment and regulatory approval processes, providing practical engineering

Qualifications

• Degree or equivalent in Cyber Security, Computer Science, Electronic Engineering, Software Engineering or a related discipline.
• Strong understanding of product cybersecurity legislation and regulatory compliance.
• Experience reviewing technical documentation to determine whether it provides sufficient evidence of compliance.
• Working knowledge of EN 18031, EN 40000 and IEC 62443 standards.
• Ability to interpret technical standards and translate regulatory requirements into practical engineering recommendations.
• Understanding of secure software development, security risk assessment and secure product lifecycle principles.
• Experience conducting cybersecurity risk assessments or security architecture reviews.
• Excellent written communication skills with experience producing technical reports for customers or regulatory purposes.
• Strong interpersonal skills with ability to communicate with technical and non-technical stakeholders.
• Experience with product conformity assessment, certification or regulatory compliance activities.
• Knowledge of legislation and regulatory frameworks such as CRA, RED Delegated Regulation, NIS2 or PSTI.
• Familiarity with ETSI EN 303 645, ISO/IEC 27001, ISO/SAE 21434 or Common Criteria.
• Professional certifications such as CISSP, CompTIA Security+, ISA/IEC 62443 Cybersecurity Certificate or equivalent.

Responsibilities

• Assess products against applicable cybersecurity legislation, harmonised standards and industry best practice.
• Review technical documentation to determine whether sufficient evidence exists to demonstrate compliance with regulatory requirements.
• Evaluate cybersecurity architectures, risk assessments, software documentation, vulnerability and threat management processes, security test reports and supporting technical evidence.
• Interpret the requirements of product cybersecurity standards and apply them across diverse technologies and product types.
• Produce clear, technically robust assessment reports that identify areas of compliance, non-conformity and opportunities for improvement.
• Support clients in understanding regulatory expectations and implementing practical solutions to achieve compliance.
• Provide technical guidance during product development to embed cybersecurity requirements throughout the product lifecycle.
• Participate in technical meetings and customer engagements, presenting assessment findings clearly.

Skills

Cybersecurity expertise

Regulatory compliance

Technical reporting

Stakeholder communication

Risk assessment

Product lifecycle knowledge

Education

Degree in Cyber Security or related discipline

Tools

CISSP

CompTIA Security+

ISA/IEC 62443 Certificate

Job description

Conformance are looking for a Cyber Security Associate to join our growing cybersecurity and compliance consultancy team. You will work with manufacturers, technology companies and product developers to help them demonstrate compliance with emerging product cybersecurity legislation and international standards. Working alongside other CE /UKCA marking consultants and technical specialists, you will contribute to assessments covering a broad range of connected products and industrial systems.

This is a technically focused role requiring the ability to interpret cybersecurity legislation and standards, critically assess product documentation, and provide practical compliance advice to clients. You will review technical evidence, identify compliance gaps, and support clients through the conformity assessment and regulatory approval processes.

Key Responsibilities

• Assess products against applicable cybersecurity legislation, harmonised standards and industry best practice.
• Review technical documentation to determine whether sufficient evidence exists to demonstrate compliance with regulatory requirements.
• Evaluate cybersecurity architectures, risk assessments, software documentation, vulnerability and threat management processes, security test reports and supporting technical evidence.
• Interpret the requirements of product cybersecurity standards and apply them consistently across diverse technologies and product types.
• Produce clear, technically robust assessment reports that identify areas of compliance, non-conformity and opportunities for improvement.
• Support clients in understanding regulatory expectations and implementing practical solutions to achieve compliance.
• Provide technical guidance during product development to help clients embed cybersecurity requirements throughout the product lifecycle.
• Participate in technical meetings, workshops and customer engagements, presenting assessment findings and explaining complex regulatory requirements in a clear and professional manner.
• Contribute to conformity assessment and certification activities where required.
• Monitor developments in cybersecurity legislation, standards and regulatory guidance, ensuring consultancy services remain current and aligned with industry expectations.
• Assist in developing internal methodologies, technical guidance and assessment templates to support continuous improvement.

Essential Skills and Experience

• Degree or equivalent experience in Cyber Security, Computer Science, Electronic Engineering, Software Engineering or a related discipline.
• Strong understanding of product cybersecurity legislation and regulatory compliance.
• Experienced in reviewing technical documentation and determining whether it provides sufficient evidence to demonstrate compliance.
• Working knowledge of the following standards:
  • EN 18031
  • EN 40000
  • IEC 62443
• Ability to interpret technical standards and translate regulatory requirements into practical engineering recommendations.
• Understanding of secure software development, security risk assessment and secure product lifecycle principles.
• Ability to analyse technical documentation including system architectures, threat models, software documentation and security test reports.
• Excellent written communication skills with experience producing technical reports for customers or regulatory purposes.
• Strong interpersonal skills with the ability to communicate confidently with both technical and non-technical stakeholders.
• Experience with product conformity assessment, certification or regulatory compliance activities.
• Knowledge of legislation and regulatory frameworks such as the Cyber Resilience Act (CRA), Radio Equipment Directive (RED) Delegated Regulation, NIS2 or the UK Product Security and Telecommunications Infrastructure (PSTI) regime.
• Experience conducting cybersecurity risk assessments or security architecture reviews.
• Familiarity with standards and guidance including ETSI EN 303 645, ISO/IEC 27001, ISO/SAE 21434 or Common Criteria.
• Professional certifications such as CISSP, CompTIA Security+, ISA/IEC 62443 Cybersecurity Certificate or equivalent.

Personal Attributes

• Analytical, inquisitive and detail-oriented.
• Able to interpret complex technical and regulatory requirements objectively.
• Comfortable engaging directly with clients and building trusted professional relationships.
• Strong organisational skills with the ability to manage multiple client projects simultaneously.
• A collaborative team player with a commitment to delivering high‑quality consultancy services.
• Motivated to continuously develop technical expertise in an evolving regulatory landscape.

What You'll Bring to the team

You will combine technical cybersecurity knowledge with sound engineering judgement and an interest in regulatory compliance. You will be able to review complex technical documentation, interpret cybersecurity legislation & standards, and provide clients with clear, evidence-based advice that supports successful product certification and market access.

Above all, you'll enjoy solving technical compliance challenges and helping clients navigate an increasingly complex cybersecurity regulatory environment.