Senior Consultant - Cybersecurity

UL Solutions; Bengaluru; Hybrid; INR 2,000,000 - 4,000,000; Full time

Job summary

UL Solutions in Bengaluru is seeking an experienced cybersecurity professional to support CRA-related evaluation services for customers across Greater Asia. You will conduct practical evaluations, including process assessments and gap analyses, to help clients understand their readiness against CRA requirements and identify areas for improvement.

The role emphasizes planning and leading customer evaluation projects, delivering clear reports, and advising on compliant security enhancements, with

Qualifications

• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs.
• Experience implementing cybersecurity for IoT devices or industrial control devices.
• Strong communication and customer-facing skills.
• Fluent in English (written and spoken).

Responsibilities

• Assess product classification, CRA obligations, and conformity assessment routes for products with digital elements.
• Plan and lead customer evaluation projects, including scope definition, stakeholder interviews, technical discussions, evidence review, and final report delivery.
• Evaluate customer cybersecurity processes and evidence, including risk assessments, technical documentation, secure development lifecycle practices, and vulnerability handling processes.
• Perform process assessments and gap analyses against CRA requirements, identifying compliance gaps and improvement opportunities.
• Prepare clear evaluation reports, findings, and actionable recommendations for customers.
• Support proposal development, pre-sales activities, and customer meetings.
• Maintain up-to-date knowledge of CRA requirements and relevant cybersecurity standards.

Skills

Cybersecurity

Risk management

Client communication

Regulatory compliance

IoT security

ICS/SCADA security

Education

Bachelor's degree

Job description

We are seeking an experienced cybersecurity professional to support CRA-related evaluation services for customers across Greater Asia. The role focuses on conducting practical evaluations, such as process assessments and gap analyses, helping customers understand their readiness against CRA requirements and identify areas for improvement.

Responsibilities

• Assess product classification, applicable CRA obligations, and conformity assessment routes for products with digital elements.
• Plan and lead customer evaluation projects, including scope definition, stakeholder interviews, technical discussions, evidence review, and final report delivery.
• Evaluate customer cybersecurity processes and evidence, including risk assessments, technical documentation, secure development lifecycle practices, and vulnerability handling processes.
• Perform process assessments and gap analyses against CRA requirements, identifying compliance gaps and improvement opportunities.
• Prepare clear evaluation reports, findings, and actionable recommendations for customers.
• Support proposal development, pre‑sales activities, and customer meetings.
• Maintain up-to-date knowledge of CRA requirements and relevant cybersecurity standards.

Qualifications required

• Bachelor's degree in Engineering, Computer Science, IT, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Strong communication and customer‑facing skills.
• Fluent in English (written and spoken).

Preferred

• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Familiarity with the Cyber Resilience Act (CRA) and relevant cybersecurity standards, including ISO 21434, IEC 62443, EN 18031, and ETSI EN 303 645