Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

BSI; Hemel Hempstead; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading business improvement and standards company seeks a Subject Matter Expert – Product Cybersecurity to lead testing and evaluations of IoT devices. This pivotal role requires deep expertise in cybersecurity standards and hands-on testing experience, supporting clients to navigate evolving regulations. Join a diverse workplace that prioritizes inclusion and champions the development of secure connected products.

Benefits

Flexible working hours

Annual Bonus

Contribution Based Pension

Private Healthcare

27 Days Annual Leave + Bank Holidays

Income Protection & Life Assurance

Qualifications

• 5+ years of experience in hardware cybersecurity testing for IoT/connected devices.
• Strong understanding of interfaces like UART, JTAG, SPI, I2C.
• Ability to guide teams and clients through security evaluations and compliance.

Responsibilities

• Lead compliance testing and evaluations of IoT devices.
• Research and evaluate new test equipment and methodologies.
• Provide expert advice on cybersecurity standards and practices.

Skills

Hardware cybersecurity testing

IoT standards compliance

Microcontroller knowledge

Programming (Python, C/C++, Java)

Education

Bachelor's degree in Cybersecurity, Computer/Electrical/Electronic Engineering, Telecommunications or IT

Tools

Nmap

Burp Suite

Wireshark

Nessus

Job description

We exist to create positive change for people and the planet. Join us and make a difference too!

Job Title: Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

Location: Hemel Hempstead, Hertfordshire
Job Type: Full-time, Permanent (36 hours/week)

Overview

Are you a cybersecurity expert passionate about securing connected products in a rapidly evolving digital landscape?

We’re looking for a Subject Matter Expert (SME) – Product Cybersecurity to lead compliance testing and evaluation of connected consumer, industrial, and medical devices. This is a pivotal technical leadership role, combining hands-on testing, standards interpretation, and strategic guidance to support clients and influence the global security of IoT technologies.

You’ll be at the forefront of emerging cybersecurity regulations and connected product risks, helping clients bring secure products to market and contributing to BSI’s growing reputation as a global authority in product cybersecurity assurance.

What You'll Be Doing

• Act as BSI’s technical authority for product cybersecurity compliance.
• Lead and support cybersecurity testing of IoT products across consumer, industrial, and healthcare sectors.
• Provide expert interpretation of standards including ETSI EN 303 645, ETSI TS 103 701, RED EN 18031, IEC 62443, UL 2900, and OWASP.
• Develop and improve test methods, tools, and automated reporting processes for the IoT lab.
• Guide internal teams and clients through security evaluations, results interpretation, and resolution of compliance issues.
• Research and evaluate new test equipment and methodologies for advanced threat simulation and analysis.
• Maintain CREST CPSA or equivalent technical certification.
• Ensure timely testing and reporting aligned with operational KPIs and accreditation requirements.

Key Skills & Experience

Required:

• 5+ years of hands-on hardware cybersecurity testing (IoT/connected devices).
• Expertise in global IoT cybersecurity standards and compliance practices.
• Strong understanding of microcontrollers (e.g. STM32, ESP32), RTOS, and wireless protocols (Zigbee, Bluetooth, Wi-Fi, Cellular, LoRa WAN).
• Skilled in interfaces like UART, JTAG, SPI, I2C for debugging.
• Proficiency with tools such as Nmap, Burp Suite, Wireshark, Nessus.
• Strong programming foundation (Python, C/C++, Java, etc.).
• Bachelor's degree in Cybersecurity, Computer/Electrical/Electronic Engineering, Telecommunications or IT.

Preferred:

• Previous experience as a Product Cybersecurity SME within the TIC (Testing, Inspection, Certification) industry.
• Familiarity with custom-built firmware/hardware and IoT architecture principles.
• CREST CPSA or equivalent qualification (or willingness to obtain).

Why Join Us?

At BSI, you’ll have the opportunity to:

• Influence cybersecurity practices across global industries.
• Work with cutting-edge connected technologies and security testing methods.
• Be part of an internationally recognised certification body trusted by top brands.
• Contribute to the development of new compliance standards and thought leadership in the IoT space.

BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training, and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Income Protection & Life Assurance.

Make a real impact in securing the connected world.
Apply now or reach out to our team to learn more.

D&I Policy

BSI is committed to ensuring the diversity of our workforce reflects that of our clients and the communities in which we operate. Our goal is to create a sense of belonging for all employees by providing opportunities to develop, grow, andengage with our global organization all while having fun doing great work.BSI is a community where everyone can thrive.

If you require any reasonable accommodation to be made on account of a disability or impairment throughout our recruiting process, please inform your Talent Acquisition Partner.

#LI-GC1

About Us

BSI is a business improvement and standards company and for over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives.

Today BSI partners with more than 77,500 clients in 195 countries and engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments.
Utilizing its extensive expertise in key industry sectors - including automotive, aerospace, built environment, food and retail, and healthcare - BSI delivers on its purpose by helping its clients fulfil theirs.
Living by our core values of Client-Centricity, Agility, and Collaboration, BSI provides organizations with the confidence to grow by partnering with them to tackle society’s critical issues – from climate change to building trust in digital transformation and everything in between - to accelerate progress towards a better society and a sustainable world.

BSI is an Equal Opportunity Employer dedicated to fostering a diverse and inclusive workplace.