Cyber Resilience Act Program Manager

JBT Marel; Boxmeer; On-site; EUR 90,000 - 120,000; Full time

Job summary

JBT Marel seeks a CRA Program Manager to lead the enterprise program ensuring compliance with the EU Cyber Resilience Act for all digital components across divisions.

The role spans enterprise readiness across products, software, automation and lifecycle processes, defining roadmap, governance and milestones in collaboration with Innovation, Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.

Qualifications

• Relevant university degree or higher education in a related field is preferred.
• Experience in program management, product development, or cybersecurity is advantageous.
• Knowledge of EU Cyber Resilience Act requirements is beneficial.
• Experience coordinating across multiple functions (Engineering, IT, Legal, Compliance, Procurement, Service and Commercial).
• Excellent English skills, written and verbal, in a multi-cultural environment.

Responsibilities

• Lead enterprise CRA readiness and embed secure-by-design requirements into innovation, stage-gate, product development, documentation and lifecycle processes.
• Ensure all in-scope products are assessed, remediation is governed, evidence is audit-ready and cybersecurity practices are aligned across divisions.
• Provide governance, risk visibility and executive communication for timely decisions on priorities, resources and market-access risks.
• Define and execute the enterprise CRA readiness roadmap across all in-scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure-by-design and security lifecycle requirements into development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering.
• Align CRA requirements with design standards, documentation, conformity evidence and lifecycle obligations.
• Drive vulnerability management, incident handling and post-market security monitoring.
• Coordinate across Engineering, Information Security, IT, Legal, Compliance, Procurement, Service and Commercial teams.
• Support divisions with changes, templates, ownership models and training.
• Track readiness status, risks, dependencies, resources and remediation progress across portfolios.
• Prepare structured updates for Innovation Council and upper management.

Job description

We are looking for a Cyber Resilience Act (CRA) Program Manager, reporting to our Director of Innovation Excellence.

Job Summary

The CRA Program Manager leads the enterprise program to achieve and sustain compliance with the EU Cyber Resilience Act for all JBT Marel products with digital components across divisions.

Scope and Authority

The role covers the enterprise CRA readiness program across divisions and operating units, including products, software, automation, connected components and relevant lifecycle processes in scope of the regulation. The manager defines the roadmap, governance, milestones, reporting structure and implementation expectations in collaboration with Innovation, Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams. The role is authorized to set readiness reporting expectations, drive adoption of required processes and standards, and to elevate non‑compliance risks that may affect compliance, liability or EU market access. Final compliance accountability remains with executive leadership and divisional/product owners.

Primary Accountability

Lead enterprise CRA readiness and embed secure‑by‑design requirements into innovation, stage‑gate, product development, documentation and lifecycle processes. Ensure all in‑scope products are assessed, remediation is governed, evidence is audit‑ready and product cybersecurity practices are aligned across divisions. Provide clear governance, risk visibility and executive communication so leadership can make timely decisions on priorities, resources and market‑access risks.

Main Tasks

• Define and execute the enterprise CRA readiness roadmap across all in‑scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure‑by‑design and security lifecycle requirements into innovation, stage‑gate and product development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering for in‑scope products.
• Align CRA requirements with design standards, technical documentation, conformity evidence and lifecycle obligations.
• Drive consistent vulnerability management, incident handling and post‑market security monitoring processes.
• Coordinate Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.
• Support divisions with practical process changes, tools, templates, ownership models and training.
• Track readiness status, risks, dependencies, resources and remediation progress across divisions and portfolios.
• Prepare structured updates for the Innovation Council and upper management to support priorities and resourcing decisions.
• Maintain audit‑ready evidence and expedite material risks that could affect compliance, liability or EU market access.

Skills and Abilities

• Strong program leadership in complex, cross‑functional and multi‑divisional environments.
• Ability to drive enterprise change and process adoption without relying only on direct authority.
• Good understanding of product development, innovation governance and lifecycle management.
• Ability to translate regulatory cybersecurity requirements into practical processes and deliverables.
• Strong stakeholder management, facilitation and executive communication skills.
• Structured, pragmatic and execution‑focused, with clear judgment on risk escalation and decision needs.

Education, Knowledge and Experience

• Relevant university degree, preferably within engineering, cybersecurity, computer science, industrial engineering, innovation management or a related field.
• Experience in program management, product development, cybersecurity, regulated compliance or product lifecycle governance.
• Knowledge of EU Cyber Resilience Act requirements, secure‑by‑design principles, product cybersecurity or related regulatory frameworks is an advantage.
• Experience from equipment manufacturing, industrial automation, software‑enabled products or complex B2B machinery is an advantage.
• Experience coordinating across Engineering, IT, Information Security, Legal, Compliance, Procurement, Service and Commercial functions.
• Excellent English skills, both written and verbal, and comfort working in a multi‑cultural, multi‑discipline organization.

Benefits

• Salary will be dependent on candidate location and profile.
• Details relating to holiday, healthcare benefits, pension and other benefits will be shared directly with applicants.

JBT Marel is an equal opportunity employer and values diversity in the workplace. We encourage all qualified individuals to apply.