ADI Global is currently seeking a Product Security Compliance Lader to ensure that our products are secure and compliant throughout their lifecycle, covering design, production, and maintenance. Key responsibilities include assessing security controls against frameworks (e.g., NIST, ISO, IEC), managing product vulnerabilities, coordinating penetration tests, ensuring compliance with regulations like the Cyber Resilience Act, and fostering a "secure-by-design" culture within R&D.
Job Duties
- Liaise with stakeholders such as security, engineering and legal teams, vendors, and end-users regarding product compliance with internal security frameworks, adopted industry standards, and applicable cybersecurity regulation.
- Develop, implement, and enforce product security policies, procedures, white papers regarding product security posture.
- Monitor, interpret, and apply relevant laws and standards to products, such as CRA, RED, GDPR, CCPA, NIST RMF, ISO 27K, and how they impact ADI products.
- Stay updated on the latest IoT security trends, regulations, standards, and best practices, ensuring ADI policies and procedures remain current and effective.
- Conduct security audits, risk assessments, and vulnerability assessments to validate compliance.
- Analyze supply chains to ensure components meet safety and security requirements.
- Coordinate with engineering teams to handle security incidents and ensuring timely remediation.
- Interface with Legal and Marketing Communications group to manage communications of security vulnerabilities in Resideo products.
You Must Have
- Bachelor's degree in computer science, electrical engineering, mathematics, or similar discipline.
- A passion for product security and safety compliance so as to provide excellence to your stakeholders.
- Excellent communication and leadership skills. An excellent level of English (written and spoken).
- Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders.
We Value
- Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP, CISSP, CISA.
- Master's degree in computer science, electrical engineering, mathematics, or similar discipline.
- Background in the legal field.
What's in it for You
- Competitive salary and benefits.
- Hybrid working model.
- Excellent career development opportunities.
- Work from our modern International Head Office in Oldham.
#J-18808-Ljbffr