Ir para o conteúdo
Portuguêspt
Portuguêspt
English

CRA Compliance & Product Security Engineer - Remote in Mexico

  • Remote
    • México, Ciudad de México, Mexico
  • Operational Recruitment

Job description

Important IT company At the Latin American level, growth requires:

CRA Compliance & Product Security Engineer 

Position Summary 

We are seeking a CRA Compliance & Product Security Engineer to support the organization in meeting European Cyber Resilience Act (CRA) requirements while strengthening product security throughout the product lifecycle. 

The ideal candidate combines regulatory/compliance knowledge with hands-on product security and software engineering experience, and can translate regulatory requirements into practical security controls, engineering processes, and product requirements. 

Required Experience & Expertise 

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field. 

  • 3+ years of experience in Product Security, Cybersecurity, Compliance, or Secure Software Engineering. 

  • Strong understanding of the EU Cyber Resilience Act (CRA) and its relationship with regulations/frameworks such as NIS2. 

  • Experience with Product Security / Secure SDLC, including security requirements, threat/risk assessment, security testing, and vulnerability management. 

  • Familiarity with hardware and software architectures, cybersecurity risks, and security controls. 

  • Hands-on knowledge of CVE/vulnerability management, vulnerability assessment, remediation tracking, and security incident response. 

  • Understanding of cryptography, secure data erasure, authentication, access control, and secure communications. 

  • Experience translating regulatory and security requirements into technical requirements, engineering processes, and actionable controls. 

  • Strong experience working cross-functionally with Engineering, Product, Software Development, QA, Legal, Compliance, and Security teams. 

Key Responsibilities 

  • Assess products and development processes against CRA requirements and identify compliance gaps. 

  • Translate regulatory requirements into product security requirements and engineering controls. 

  • Support vulnerability management, including CVE identification, risk assessment, remediation, and reporting. 

  • Contribute to Secure SDLC, threat modeling, security testing, and risk assessments. 

  • Support preparation and maintenance of security/compliance documentation and technical evidence. 

  • Partner with Engineering and Product teams to ensure security and compliance requirements are addressed throughout the product lifecycle. 

  • Monitor changes in relevant cybersecurity regulations and standards and assess their impact on products and processes. 

Preferred Qualifications 

  • CISSP, CISM, or equivalent cybersecurity certification. 

  • CRA-specific training/certification, such as CybResActTPro, is highly desirable. 

  • Experience with IoT, connected products, embedded systems, industrial products, or other regulated technology products. 

  • Experience with international cybersecurity standards and frameworks such as ISO 27001, IEC 62443, NIST, or similar. 

 

ADVANCED CONVERSATIONAL ENGLISH AND SPANISH ESSENTIAL (Will be evaluated).

If you are a foreingner residing in Mexico, you must have a valid INE, CURP, NSS and RFC.

Job type: Remote

Location: México.

Salary: $110,000 gross

Benefits: Excellent superior benefits.

or