Product Cybersecurity Regulatory Analyst

Andersen; Praga, Polska; On-site; PLN 110,000 - 190,000; Full time

Benefits offered by this job

BA meetups

Professional certificates program

Mentorship opportunities

Knowledge base access

Job summary

Andersen is seeking a Product Cybersecurity Regulatory Analyst to monitor US federal and state cybersecurity and data privacy regulations, assess impacts on hardware, embedded software, and cloud services, and support regulatory alignment across product lines.

You will contribute to quarterly regulatory updates, distinguish consumer vs B2B applicability, and help identify compliance risks while collaborating with a global team.

Qualifications

• 3+ years tracking US federal rulemaking and multi-state legislation in product regulation (IoT/connected devices)
• Working knowledge of FCC Part 15 and US Cyber Trust Mark programs
• Familiarity with state privacy laws (CCPA/CPRA) as they apply to device data
• Ability to distinguish consumer vs B2B applicability and flag uncertainty
• English level of Upper-Intermediate or higher

Responsibilities

• Monitor US federal and state regulatory sources quarterly (FCC, Cyber Trust Mark, NIST/OMB IoT, NHTSA cybersecurity, CPSC)
• Assess applicability of new/amended regulations to product categories (hardware, embedded software, cloud) with consumer vs B2B focus
• Prepare and contribute regulatory updates and recommendations to consolidated quarterly report

Skills

Regulatory tracking

US compliance

IoT regulation

English fluency

Policy analysis

Education

Bachelor's in Regulatory Affairs

Bachelor's in Engineering or Law

Tools

FCC Part 15

NIST/OMB guidance

CPRA/CCPA knowledge

Job description

Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment.

The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across multiple industries.

The project is focused on monitoring and analyzing US federal and state regulations related to cybersecurity, data privacy, and connected devices. It aims to assess regulatory changes and their impact on product compliance, identify potential risks, and provide consolidated reporting to support informed decision-making and regulatory alignment.

Responsibilities:

• Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.
• Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements.
• Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report.

Must-haves:

• Experience in tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years.
• Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program, state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois).
• Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation, video/audio).
• Comfortable judging consumer vs B2B applicability and flagging uncertainty instead of concluding.
• Level of English – from Upper-Intermediate and above.

Reasons why this job would be interesting to you:

• Andersen cooperates with such businesses as Samsung, Reuter Gruppe, T-Systems, TUI, Ryanair, Johnson & Johnson, etc. This project is just your beginning here – working with us means reliability and prospects.
• We have been strengthening our expertise since 2007. During this time, we have formed an excellent BA & SA team with streamlined processes, which now consists of more than 200 qualified analysts.
• We welcome specialists from every part of the world.
• We give our employees an opportunity to attend and participate in the company’s BA meetups, as well as offer a compensation program for international professional certificates.
• There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded.
• You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow.
• Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more.

Your personal data is protected in accordance with GDPR regulations. Learn more: https://andersenlab.com/privacy-policy