Senior Cybersecurity Consultant

UL India Pvt Ltd; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

UL India Pvt Ltd in Bengaluru is seeking a Senior Consultant - Cybersecurity to support CRA-related evaluation services across Greater Asia. You will lead practical evaluations, including process assessments and gap analyses, and prepare clear reports with recommendations for customers.

Requirements include a Bachelor's degree in a related field, 5+ years in cybersecurity, and experience with CRA programs, IoT/ICS security, SBOMs, and secure development lifecycle evidence.

Qualifications

• Bachelor's degree required in Engineering, Computer Science, IT, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development lifecycle, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs.
• Experience implementing cybersecurity for IoT devices or industrial control devices.
• Experience reviewing product cybersecurity risk assessments, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Strong communication and customer-facing skills.

Responsibilities

• Lead CRA-related evaluation projects, including scope definition, stakeholder interviews, and final report delivery.
• Prepare evaluation reports with findings and actionable recommendations for customers.
• Support proposal development, pre-sales activities, and customer meetings.
• Maintain up-to-date knowledge of CRA requirements and relevant cybersecurity standards.

Skills

English (Fluent)

5+ years cybersecurity

Process assessments

Gap analyses

CRA regulatory programs

IoT/ICS cybersecurity

SBOMs/vulnerability processes

Communication skills

Education

Bachelor's degree in Engineering/CS/IT/Cybersecurity

Job description

Senior Consultant - Cybersecurity

We are seeking an experienced cybersecurity professional to support CRA-related evaluation services for customers across Greater Asia. The role focuses on conducting practical evaluations, such as process assessments and gap analyses, helping customers understand their readiness against CRA requirements and identify areas for improvement. Assess product classification, applicable CRA obligations, and conformity assessment routes for products with digital elements. Plan and lead customer evaluation projects, including scope definition, stakeholder interviews, technical discussions, evidence review, and final report delivery. Evaluate customer cybersecurity processes and evidence, including risk assessments, technical documentation, secure development lifecycle practices, and vulnerability handling processes. Perform process assessments and gap analyses against CRA requirements, identifying compliance gaps and improvement opportunities. Prepare clear evaluation reports, findings, and actionable recommendations for customers. Support proposal development, pre-sales activities, and customer meetings. Maintain up-to-date knowledge of CRA requirements and relevant cybersecurity standards.

Required

• Bachelor's degree in Engineering, Computer Science, IT, Cybersecurity, or a related field.
• 5+ years of experience in cybersecurity, assessment, audit, or compliance.
• Experience conducting process assessments, evaluations, or gap analyses.
• Knowledge of cybersecurity principles, secure development, and risk management.
• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.
• Strong communication and customer-facing skills.
• Fluent in English (written and spoken).

Preferred

• Experience with CRA or other cybersecurity regulatory compliance programs, including product cybersecurity evaluations.
• Experience in implementing cybersecurity for IoT devices or industrial control devices
• Experience reviewing product cybersecurity risk assessments, technical documentation, SBOMs, secure development lifecycle evidence, and vulnerability management processes.

Familiarity

Familiarity with the Cyber Resilience Act (CRA) and relevant cybersecurity standards, including ISO 21434, IEC 62443, EN 18031, and ETSI EN 303 645

Experience Level

Senior Level