Cyber Resilience Act (CRA) Officer
Core
Lead and coordinate the organization's compliance with the EU Cyber Resilience Act (CRA), managing risk assessments, secure-by-design evidence, vulnerability management, incident reporting, and technical documentation across product lifecycles.
Role type
Cyber Resilience Act (CRA) Compliance Officer
Builds
Regulatory compliance programs, technical documentation (SBOMs, risk assessments), and incident reporting workflows for intralogistics products.
Domain
Cybersecurity / Regulatory Compliance / Intralogistics
Required skills
EU Cyber Resilience Act (CRA) knowledge, vulnerability management, incident response coordination, supply chain security governance, technical documentation management, regulatory liaison, security risk assessment, secure-by-design implementation, PSIRT/CERT coordination, training development.
Preferred skills
Experience with SBOM tools, knowledge of ENISA guidelines, familiarity with conformity assessment processes.
Technologies
SBOM tools, PSIRT platforms, vulnerability tracking systems, incident management tools.
Responsibilities
Design and run the CRA compliance program and roadmap; translate legal requirements into product-level policies and controls; maintain vulnerability management and coordinated disclosure processes; coordinate with PSIRT/CERT/SOC teams for incident response; manage generation of technical documentation (risk assessments, SBOMs, security testing reports); oversee supply-chain security and third-party component governance; act as the point of contact for CRA-related communications with authorities; develop and deliver CRA-specific training; define KPIs and lead remediation programs.
Seniority
Mid-Senior, hands-on IC
