CRA Compliance & Product Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GSB Solutions

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

GSB Solutions is a global company specializing in offering advanced technological solutions and human capital management to meet the needs of various institutions. With a strong presence in Latin America, GSB Solutions leads the digital transformation through innovative solutions such as software development, IT consulting, and comprehensive cybersecurity services. The company also focuses on educational programs and training to enhance workforce skills. Additionally, GSB provides telecom services that create global connections, facilitating seamless international collaboration. Their expertise extends to managing and integrating technologies across sectors, ensuring growth and innovation for their clients.

📋 Description

• Assess products and development processes against CRA requirements and identify compliance gaps. • Translate regulatory requirements into product security requirements and engineering controls. • Support vulnerability management, including CVE identification, risk assessment, remediation, and reporting. • Contribute to Secure SDLC, threat modeling, security testing, and risk assessments. • Support preparation and maintenance of security/compliance documentation and technical evidence. • Partner with Engineering and Product teams to ensure security and compliance requirements are addressed throughout the product lifecycle. • Monitor changes in relevant cybersecurity regulations and standards and assess their impact on products and processes.

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field. • 3+ years of experience in Product Security, Cybersecurity, Compliance, or Secure Software Engineering. • Strong understanding of the EU Cyber Resilience Act (CRA) and its relationship with regulations/frameworks such as NIS2. • Experience with Product Security / Secure SDLC, including security requirements, threat/risk assessment, security testing, and vulnerability management. • Familiarity with hardware and software architectures, cybersecurity risks, and security controls. • Hands-on knowledge of CVE/vulnerability management, vulnerability assessment, remediation tracking, and security incident response. • Understanding of cryptography, secure data erasure, authentication, access control, and secure communications. • Experience translating regulatory and security requirements into technical requirements, engineering processes, and actionable controls. • Strong experience working cross-functionally with Engineering, Product, Software Development, QA, Legal, Compliance, and Security teams. • CISSP, CISM, or equivalent cybersecurity certification preferred. • CRA-specific training/certification, such as CybResActTPro, highly desirable. • Experience with IoT, connected products, embedded systems, industrial products, or other regulated technology products preferred. • Experience with international cybersecurity standards and frameworks such as ISO 27001, IEC 62443, NIST, or similar preferred. • Advanced conversational English and Spanish essential (will be evaluated). • Foreigners residing in Mexico must have a valid INE, CURP, NSS, and RFC. • Must live in Mexico and have a visa to work in Mexico.

🏖️ Benefits

• Excellent superior benefits.