Product Cybersecurity Regulatory Analyst

Andersen; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Knowledge Base access

BA meetups participation

Certification compensation

Mentor opportunities

Job summary

Andersen is seeking a Product Cybersecurity Regulatory Analyst to monitor US cybersecurity and data privacy regulations, assess compliance risks, and support regulatory alignment across hardware, embedded software, and cloud services. You will track federal and state rules (FCC Part 15, CCPA/CPRA, AI/privacy laws), prepare updates for quarterly reports, and help distinguish consumer vs B2B applicability.

This role combines regulatory insight with product-focused risk assessment in a

Qualifications

• Experience tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years.
• Familiarity with FCC Part 15 and the U.S. Cyber Trust Mark guidance, state connected-device laws, and AI/privacy laws.
• Comfortable distinguishing consumer vs B2B applicability and flagging uncertainty.

Responsibilities

• Monitor US federal regulatory sources quarterly, including FCC, Cyber Trust Mark, NIST/OMB IoT guidance, and state laws.
• Assess applicability of new regulations to product categories (hardware, embedded software, cloud services).
• Prepare and contribute US regulatory updates and recommendations to quarterly reports.

Skills

Regulatory tracking

IoT & connected devices regulation

FCC Part 15 knowledge

CCPA/CPRA familiarity

Multi-state legislation tracking

Analytical judgment

Job description

Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment.

The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across multiple industries.

The project is focused on monitoring and analyzing US federal and state regulations related to cybersecurity, data privacy, and connected devices. It aims to assess regulatory changes and their impact on product compliance, identify potential risks, and provide consolidated reporting to support informed decision-making and regulatory alignment.

Responsibilities:

• Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.

• Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements.

• Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report.

Must-haves:

• Experience in tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years.

• Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program, state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois).

• Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation, video/audio).

• Comfortable judging consumer vs B2B applicability and flagging uncertainty instead of concluding.

• Level of English – from Upper-Intermediate and above.

Reasons why this job would be interesting to you:

• Andersen cooperates with such businesses as Samsung, Reuter Gruppe, T-Systems, TUI, Ryanair, Johnson & Johnson, etc. This project is just your beginning here – working with us means reliability and prospects.

• We have been strengthening our expertise since 2007. During this time, we have formed an excellent BA & SA team with streamlined processes, which now consists of more than 200 qualified analysts.

• We welcome specialists from every part of the world.

• We give our employees an opportunity to attend and participate in the company’s BA meetups, as well as offer a compensation program for international professional certificates.

• There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded.

• You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow.

• Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more.

Your personal data is protected in accordance with GDPR regulations. Learn more: https://andersenlab.com/privacy-policy