Product Security Manager - Embedded & CRA Compliance

TrueTalent; Amersfoort; On-site; EUR 110,000 - 150,000; Full time

Job summary

TrueTalent is seeking an experienced Product Security Manager to lead cybersecurity across the full lifecycle of connected machines and embedded systems. You will translate the EU Cyber Resilience Act (CRA) into practical policies and secure-by-design principles, partnering with R&D, engineering, IT and QA to embed security from concept to deployment.

You will drive SBOM creation, vulnerability management and PSIRT, coordinating responses and regulatory reporting while aligning with IEC

Qualifications

• Bachelor’s degree in Cybersecurity, IT, Engineering or related field or equivalent practical experience.
• At least 5 years’ cybersecurity experience, preferably in product security, embedded systems or industrial environments.
• Solid knowledge of the EU Cyber Resilience Act (CRA) and translating requirements into actionable steps.
• Experience with SBOMs, vulnerability management, CVD/PSIRT and risk assessments.
• Understanding of industrial automation and OT cybersecurity challenges.
• Strong communication with engineering, IT and business stakeholders; balancing security, compliance and time-to-market.
• Optional: IEC 62443, NIST CSF or relevant security certifications.

Responsibilities

• Develop the product security framework and translate CRA into practical policies and standards.
• Collaborate with R&D, engineering, IT and QA to embed security in product development from the start.
• Define requirements for secure software development, security testing, SBOMs and documentation.
• Lead product security risk assessments, vulnerability management and PSIRT processes.
• Coordinate vulnerability response, reporting and regulatory compliance during incidents.
• Ensure cybersecurity compliance with CRA, Machinery Regulation, NIS2 and IEC 62443.

Skills

Product security

Regulatory compliance

Industrial cybersecurity

Stakeholder communication

Vulnerability management

SBOMs

CVD/PSIRT processes

Education

Bachelor’s degree in Cybersecurity, IT, Engineering or related field

Tools

IEC 62443

NIST CSF

CRA knowledge

Job description

TrueTalent is seeking an experienced Product Security Manager to lead cybersecurity across the full lifecycle of connected machines and embedded systems. You will translate the EU Cyber Resilience Act (CRA) into practical policies and secure-by-design principles, partnering with R&D, engineering, IT and QA to embed security from concept to deployment.

You will drive SBOM creation, vulnerability management and PSIRT, coordinating responses and regulatory reporting while aligning with IEC