Educational Qualifications
- Master’s or Bachelor’s degree in Computer Science, Information Technology, Electronics, Electrical Engineering, Cybersecurity, or related disciplines.
- Advanced specialization in Cybersecurity or Embedded Systems Security is highly preferred.
- Professional certifications strongly desirable:
- CISSP, CISM, or equivalent
- Demonstrated knowledge of international product security regulatory schemes (EU Cyber Resilience Act, EN 40000 series, NIS2, ISO 27001, NIST).
Job Summary
This role focuses on conformity assessment and assurance for connected products, ensuring regulatory obligations are met and compliance evidence is robust and traceable. The role emphasizes collaboration, training, and continuous improvement to enhance cyber compliance maturity across the organization.
As part of the Corporate Product Compliance function, the role will govern and assure cybersecurity compliance across product lines and divisions while collaborating closely with global teams and program managers.
Key Responsibilities
- Facilitate conformity assessment frameworks and assurance activities for cybersecurity product requirements.
- Identify and specify cybersecurity obligations across regional and national jurisdictions.
- Define assurance plans and compliance justification requirements.
- Manage engagement with third‑party testing laboratories.
- Deliver training and “train-the-trainer” programs for compliance teams.
- Enhance compliance assurance processes, methods, and tools.
- Stay updated on evolving global cybersecurity regulations and standards.
- Collaborate with product development, software architects, and security architects to embed compliance requirements.
Required Skills & Experience
- Strong foundation in embedded software security and IoT device security.
- Hands‑on experience with:
- EN 303 645 (consumer IoT)
- RED DA with EN 18031
- Knowledge of standards and regulatory schemes:
- EU Cyber Resilience Act (CRA), EN 40000 series
- UK PSTI, NIS2, ISO 27001, NIST, US Cyber Trust Mark
- Ability to drive compliance maturity and build strong stakeholder relationships.
Accountability | Customer Centricity | Collaboration | Integrity | Perseverance | Learning Mindset | Networking | Communication Skills
Keywords for Job Portal
- Cybersecurity Compliance
- IEC 62443
- IoT Security
- Cyber Resilience Act (CRA)
- Conformity Assessment
- Product Cyber Compliance
- Regulatory Schemes (ISO 27001, NIS2, EN 40000)
Job Description
Role: Senior Associate
Experience: 5+ years
Educational Qualification
- Bachelor’s or Master’s degree in Computer Science, Information Technology, Electronics, Electrical Engineering, Cybersecurity, or related fields.
- Minimum 5 years of experience in cybersecurity, embedded systems security, or compliance assurance.
- Preferred specialization: Cybersecurity & Embedded Systems Security.
- Professional certifications strongly desirable:
- CISSP, CISM, or equivalent
- Awareness of global regulatory schemes (EU CRA, EN 40000, NIS2, ISO 27001, NIST, UK PSTI, US Cyber Trust Mark).
Job Summary
This role assists in conformity assessment for connected products, ensuring proper documentation, traceability, and compliance with international cybersecurity obligations. Collaboration, documentation excellence, and continuous improvement are central to this role.
As part of the Corporate Product Compliance function, the position requires close coordination with global specialists and direct reporting to the Senior Manager.
Key Responsibilities
- Assist in facilitating conformity assessment frameworks and assurance activities.
- Support identification and documentation of cybersecurity obligations.
- Contribute to preparing compliance evidence and maintaining traceability.
- Assist in risk assessment and threat modelling.
- Maintain structured compliance documentation and support reporting.
- Collaborate with product/software teams to ensure regulatory conformity.
- Support creation of training materials and onboarding documentation.
Required Skills & Experience
- Basic understanding of embedded device security and cybersecurity principles.
- Familiarity with:
- EN 303 645
- RED DA with EN 18031
- Awareness of key standards and regulatory schemes (EN 62443‑4‑2, EU CRA, EN 40000, UK PSTI, NIS2, ISO 27001, NIST, US Cyber Trust Mark).
- Strong organizational, documentation, and communication skills.
- Ability to collaborate across cultures.
Accountability | Customer Centricity | Collaboration | Integrity | Perseverance | Learning Mindset | Networking | Communication Skills