Product Cybersecurity Certification Specialist

Gyala; Roma; In loco; EUR 45.000 - 65.000; Tempo pieno

Descrizione del lavoro

A cybersecurity software company is seeking a Product Cybersecurity Certification Specialist to support product compliance with international standards IEC 62443 and ISO/IEC 15408. Responsibilities include collaborating with development teams and preparing necessary documentation for certification. The ideal candidate has a degree in a relevant field and expertise in cybersecurity standards. This position offers the flexibility of remote work while contributing to critical security evaluation activities.

Competenze

• Degree in Computer Engineering, Cybersecurity, Electronics, or equivalent is required.
• Strong technical documentation writing skills are essential.
• Ability to translate regulatory requirements into technical specifications.

Mansioni

• Support the implementation of the Secure Development Lifecycle (SDL).
• Prepare reports for internal teams and monitor certification activities.
• Analyze security requirements for Industrial Automation & Control Systems components.

Conoscenze

Knowledge of IEC 62443-4-1

Knowledge of IEC 62443-4-2

Knowledge of ISO/IEC 15408

Knowledge of ISO 27001

Knowledge of ISO 9001

Knowledge of embedded operating systems

DevSecOps processes

Formazione

Degree in Computer Engineering, Cybersecurity, Electronics, or equivalent

Descrizione del lavoro

Product Cybersecurity Certification Specialist

Role Description

We are looking for a Product Cybersecurity Certification Specialist to join our team, supporting evaluation activities, preparation, documentation development, and coordination with certification bodies to achieve and maintain product compliance with international standards IEC 62443-4-1, IEC 62443-4-2, and ISO/IEC 15408 (LVS evaluation and OCSI certification).

Key Responsibilities

1. IEC 62443-4-1 Compliance

• Support the implementation and maintenance of the Secure Development Lifecycle (SDL)
• Collect evidence and prepare documentation required by evaluators
• Collaborate with development teams to ensure adoption of security practices (threat modeling, vulnerability management, secure coding, patch process)

2. IEC 62443-4-2 Compliance

• Analyze security requirements for IACS (Industrial Automation & Control Systems) components
• Perform technical verification of the product against requirements (authentication, encryption, logging, secure configuration, etc.)
• Support technical teams in designing compliant security mechanisms
• Prepare Security Technical Documentation (STIG, STR, conformance matrix, test report)

3. Security Evaluation and ISO/IEC 15408 Certification (Common Criteria)

• Contribute to the definition and drafting of:
  • Security Target (ST)
  • Security Architecture
  • Evidence for LVS evaluation
• Interface with evaluation bodies (LVS Lab) and with OCSI/ACN for certification
• Collect and manage evidence for functional and penetration testing
• Support GAP analysis against applicable Protection Profiles (PP)

4. Management and Reporting

• Monitor certification activities and milestones with evaluation bodies
• Prepare reports for internal teams and management
• Contribute to internal updates of product security compliance procedures

Requirements

• Degree in Computer Engineering, Cybersecurity, Electronics, or equivalent
• Knowledge of standards:
  • IEC 62443-4-1
  • IEC 62443-4-2
  • ISO/IEC 15408 (CC)
  • ISO 27001
  • ISO 9001

Preferred Skills:

Knowledge of:

• embedded operating systems
• DevSecOps processes

Soft Skills:

• Ability to translate regulatory requirements into technical specifications
• Strong technical documentation writing skills

Location: Rome
Remote: Yes

Gyala is a company operating in the cybersecurity domain through the development and commercialization of a proprietary software solution with high technological and innovative content.