Product Security & Compliance Lead

congatec GmbH; Malaysia; On-site; MYR 60,000 - 85,000; Full time

Job summary

congatec GmbH is seeking a Product Cyber Security Specialist in Penang, Malaysia, to maintain IEC 62443 certification and ensure compliance throughout the product lifecycle. This role involves collaboration with R&D, QA, and the Information Security Officer to establish Secure Development Lifecycle processes and coordinate audits.

The ideal candidate has a degree in electrical engineering or cybersecurity, practical experience in product security, and strong knowledge of relevant standards. Very good English skills are required.

Qualifications

• Minimum of a university degree preferably in electrical engineering or cybersecurity.
• Relevant practical experience in product security, ideally in an industrial environment.
• Sound knowledge of IEC 62443 (especially 4-1 / 4-2).
• Experience with regulatory requirements such as the Cyber Resilience Act is an advantage.
• Very good English language skills.

Responsibilities

• Maintain and develop existing IEC 62443 certification and ensure CRA compliance.
• Ensure security requirements are met throughout the product lifecycle.
• Establish Secure Development Lifecycle (SDL) processes.
• Collaboration with R&D, QA, and the Information Security Officer (ISO 27001).
• Coordinate internal and external audits, penetration tests, and assessments.

Skills

Product security experience

Knowledge of IEC 62443

Secure software development

Threat modeling

Vulnerability management

Analytical thinking

Strong communication skills

Assertiveness

Education

Completed university degree in electrical engineering or cybersecurity

Job description

congatec GmbH is seeking a Product Cyber Security Specialist in Penang, Malaysia, to maintain IEC 62443 certification and ensure compliance throughout the product lifecycle. This role involves collaboration with R&D, QA, and the Information Security Officer to establish Secure Development Lifecycle processes and coordinate audits.

The ideal candidate has a degree in electrical engineering or cybersecurity, practical experience in product security, and strong knowledge of relevant standards. Very good English skills are required.