Senior Consultant - Cybersecurity

UL Solutions; Bengaluru; On-site; INR 1,600,000 - 2,600,000; Full time

Job summary

UL Solutions is seeking an experienced cybersecurity professional to support CRA-related evaluation services across Greater Asia. The role involves practical evaluations, such as process assessments and gap analyses, to help customers understand their CRA readiness and identify areas for improvement.

You will assess product classifications, CRA obligations, and conformity routes, lead evaluation projects, and prepare reports with clear recommendations.

Qualifications

• Bachelor’s degree in Engineering, Computer Science, IT, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.

Responsibilities

• Assess product classification, CRA obligations, and conformity routes for products with digital elements.
• Plan and lead customer evaluation projects, including scope, stakeholder interviews, evidence review, and final report delivery.
• Evaluate customer cybersecurity processes and evidence, including risk assessments and vulnerability handling processes.
• Perform CRA-focused process assessments and gap analyses to identify compliance gaps and improvements.
• Prepare clear evaluation reports, findings, and actionable recommendations for customers.
• Support proposal development, pre-sales activities, and customer meetings.
• Maintain up-to-date knowledge of CRA requirements and cybersecurity standards.

Skills

Cybersecurity knowledge

Communication skills

Customer-facing skills

Education

Bachelor's degree in Engineering/CS/IT/Cybersecurity

Job description

Job Description

We are seeking an experienced cybersecurity professional to support CRA-related evaluation services for customers across Greater Asia. The role focuses on conducting practical evaluations, such as process assessments and gap analyses, helping customers understand their readiness against CRA requirements and identify areas for improvement.

Responsibilities

• Assess product classification, applicable CRA obligations, and conformity assessment routes for products with digital elements.
• Plan and lead customer evaluation projects, including scope definition, stakeholder interviews, technical discussions, evidence review, and final report delivery.
• Evaluate customer cybersecurity processes and evidence, including risk assessments, technical documentation, secure development lifecycle practices, and vulnerability handling processes.
• Perform process assessments and gap analyses against CRA requirements, identifying compliance gaps and improvement opportunities.
• Prepare clear evaluation reports, findings, and actionable recommendations for customers.
• Support proposal development, pre-sales activities, and customer meetings.
• Maintain up-to-date knowledge of CRA requirements and relevant cybersecurity standards.

Qualifications

• Bachelor's degree in Engineering, Computer Science, IT, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Strong communication and customer-facing skills.
• Fluent in English (written and spoken).

Preferred

• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Familiarity with the Cyber Resilience Act (CRA) and relevant cybersecurity standards, including ISO 21434, IEC 62443, EN 18031, and ETSI EN 303 645