Product Security Compliance Program Analyst - Cyber Security GRC

Product Security Compliance Program Analyst

Position Summary :

We are looking for a Product Security Compliance Program Analyst to support and coordinate product security, cybersecurity compliance, governance, and program execution.

The role will work closely with Engineering, Product Management, Quality, Legal, Security, and Program Management teams to ensure security requirements, compliance activities, audits, documentation, and remediation activities are completed throughout the product lifecycle.

Key Responsibilities :

• Coordinate Product Security and Cybersecurity Compliance programs across multiple teams.

• Track project plans, milestones, dependencies, deliverables, and action items.

• Support Secure Product Development Lifecycle (SPDLC/SSDLC) activities.

• Coordinate compliance activities for IEC [hidden], EU Cyber Resilience Act (CRA), SSMF, and related security requirements.

• Maintain compliance evidence, audit documentation, security records, and certification artifacts.

• Track security risks, corrective actions, remediation plans, and mitigation activities.

• Coordinate follow-up activities related to penetration testing and threat-model findings.

• Support internal/external security audits and certification programs.

• Prepare security dashboards, KPIs, metrics, and management reports.

• Monitor emerging cybersecurity regulations and communicate their impact to stakeholders.

• Coordinate with PSIRT and security teams on vulnerability and regulatory activities.

• Identify opportunities to improve security governance, compliance workflows, reporting, and evidence management.

• Translate regulatory/security requirements into actionable project plans.

Required Skills & Experience :

• Bachelor's degree in Engineering, Computer Science, Cybersecurity, Information Systems, Business, or related field.

• 3 - 5 years of experience in Cybersecurity, Security Compliance, GRC, Governance, Program Management, or Project Management.

• Experience coordinating cross-functional technical/security initiatives.

• Strong understanding of security governance, risk, compliance, and audit processes.

• Experience with project/collaboration tools such as Jira, Confluence, Microsoft Project, or similar.

• Strong documentation, reporting, analytical, and communication skills.

• Ability to manage multiple projects, priorities, and deadlines.

Preferred Skills :

• Product Security / Secure Product Development Lifecycle (SPDLC/SSDLC)

• IEC 62443, EU Cyber Resilience Act (CRA), NIST SSDF, ISO 27001, ISO 29147 / ISO 30111

• Vulnerability Management / PSIRT, Cybersecurity GRC, Security Risk Management, Audit & Certification

• Semiconductor, Embedded, Industrial Automation, or IoT product environment

• CAPM, PMP, Security+, CISA, or similar certification .