Cyber Resilience Act Program Manager

Jobtailor; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking an experienced Enterprise CRA program manager to lead readiness across divisions, embedding secure-by-design into innovation, stage-gate, product development and lifecycle governance, with a focus on EU market access.

You will coordinate across Engineering, Information Security, IT, Legal, Compliance, Procurement, Service and Commercial teams to ensure audit-ready evidence, risk visibility and timely executive updates for priorities, resources and remediation efforts.

Qualifications

• University degree in engineering, cybersecurity, computer science or related field.
• Experience in program management and product lifecycle governance.
• Knowledge of EU Cyber Resilience Act and secure-by-design principles.
• Experience with equipment manufacturing, industrial automation, or B2B machinery is an advantage.
• Excellent English, written and verbal, in a multi-cultural organization.

Responsibilities

• Lead enterprise CRA readiness and embed secure-by-design into development processes.
• Ensure products are assessed, remediation governed, and evidence audit-ready.
• Provide governance and executive communication on priorities and market-access risks.
• Define and execute CRA readiness roadmap for in-scope products.
• Establish program governance, milestones, reporting cadence, and escalation routes.
• Coordinate risk assessments and remediation planning for in-scope products.
• Align CRA requirements with design standards and lifecycle obligations.
• Drive vulnerability management and post-market security monitoring.
• Coordinate across Engineering, IT, Legal, Compliance, Procurement, Service and Commercial.
• Support divisions with processes, tools, templates, ownership models and training.
• Track readiness, risks, dependencies, resources and remediation progress.
• Prepare updates for Innovation Council to support decisions.
• Maintain audit-ready evidence and escalate material risks for EU market access.

Skills

Program management

Product development

Cybersecurity

Regulatory frameworks

Secure-by-design

Lifecycle governance

Cross-functional coordination

Executive governance

Education

Bachelor's degree in engineering, cybersecurity, computer science

Job description

Responsibilities

• Lead enterprise CRA readiness and embed secure‑by‑design requirements into innovation, stage‑gate, product development, documentation and lifecycle processes.
• Ensure all in‑scope products are assessed, remediation is governed, evidence is audit‑ready and product cybersecurity practices are aligned across divisions.
• Provide clear governance, risk visibility and executive communication so leadership can make timely decisions on priorities, resources and market‑access risks.
• Define and execute the enterprise CRA readiness roadmap across all in‑scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure‑by‑design and security lifecycle requirements into innovation, stage‑gate and product development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering for in‑scope products.
• Align CRA requirements with design standards, technical documentation, conformity evidence and lifecycle obligations.
• Drive consistent vulnerability management, incident handling and post‑market security monitoring processes.
• Coordinate Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.
• Support divisions with practical process changes, tools, templates, ownership models and training.
• Track readiness status, risks, dependencies, resources and remediation progress across divisions and portfolios.
• Prepare structured updates for the Innovation Council and upper management to support priorities and resourcing decisions.
• Maintain audit‑ready evidence and escalate material risks that could affect compliance, liability or EU market access.

Requirements

• Relevant university degree, preferably within engineering, cybersecurity, computer science, industrial engineering, innovation management or a related field.
• Experience in program management, product development, cybersecurity, regulated compliance or product lifecycle governance.
• Knowledge of EU Cyber Resilience Act requirements, secure‑by‑design principles, product cybersecurity or related regulatory frameworks is an advantage.
• Experience from equipment manufacturing, industrial automation, software‑enabled products or complex B2B machinery is an advantage.
• Experience coordinating across Engineering, IT, Information Security, Legal, Compliance, Procurement, Service and Commercial functions.
• Excellent English skills, both written and verbal, and comfort working in a multi‑cultural, multi‑discipline organization.

Core Competencies

Demonstrates expertise in program management and product development with a strong focus on cybersecurity and compliance, particularly in alignment with EU Cyber Resilience Act requirements. Proven ability to coordinate cross‑functional teams and embed secure‑by‑design principles into product lifecycles.