Product Security and Regulatory Expert

Required Qualifications

• 7+ years of experience in product security, IT compliance/regulatory, product, IT security
• Must have deep expertise of: EU CRA, EU RED, IEC 62443
• Strong understanding of:
• • Cloud environments (AWS, Azure, GCP)
  • Enterprise networking
  • Identity & access management
  • Data protection and encryption technologies
  • Logging, monitoring, and security tooling
• Experience leading or supporting external audits.
• Ability to translate legal/regulatory language into technical requirements.
• Strong documentation and stakeholder communication skills.

 
Preferred Qualifications

• Experience in highly regulated industries (financial services, healthcare, defense, telecom).
• Certifications such as:
• • CISA
  • CRISC
  • CISSP
  • ISO 27001 Lead Implementer / Lead Auditor
• Experience with GRC platforms (ServiceNow GRC, Archer, OneTrust, etc.).
• Experience managing cross-border data compliance and data residency requirements.

 Regulatory & Technical Compliance

• Interpret and operationalize global and regional regulations into actionable technical controls.
• Translate regulatory requirements into technical standards for infrastructure, cloud, network, application, and data environments.
• Partner with legal, risk, audit, and security teams to ensure consistent global compliance posture.

Control Implementation & Validation

• Design and implement technical controls to meet regulatory requirements.
• Conduct control testing, gap assessments, and remediation planning.
• Lead internal and external audits; coordinate evidence collection and auditor responses.
• Automate compliance validation through tooling where possible (e.g., CSPM, SIEM, GRC platforms).

 
Global Program Management

• Support compliance strategy across multiple countries and regions.
• Monitor regulatory changes globally and assess impact to IT systems.
• Establish repeatable compliance processes for global rollouts.
• Work with regional IT leaders to ensure localized regulatory adherence.

Risk & Governance

• Perform risk assessments related to regulatory exposure.
• Maintain risk registers and remediation roadmaps.
• Support policy development and technical standards documentation.
• Provide executive-level reporting on compliance posture and risk.

Key Competencies

• Strong analytical and risk-based decision-making skills
• Ability to operate in complex, matrixed global organizations
• Executive-level communication capability
• Process-oriented mindset with automation focus
• Ability to balance regulatory rigor with business enablement