Cyber Resilience Act (CRA) Compliance Lead
Core
Establish, govern, and drive the company-wide compliance framework for the EU Cyber Resilience Act (CRA) and related product cybersecurity regulations for FPGA and semiconductor products.
Role type
Senior enterprise compliance lead (regulatory strategy & governance)
Builds
Scalable product lifecycle processes, compliance requirements, governance mechanisms, and conformity documentation for FPGA/semiconductor products.
Domain
Semiconductor industry + Product Cybersecurity Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work -> conformity documentation & regulatory compliance frameworks
Required skills
EU Cyber Resilience Act (CRA) interpretation, product cybersecurity regulations, semiconductor/embedded product lifecycles, quality management systems, risk management, regulatory conformity, cross-functional program execution, secure SDLC, software component governance (SBOM), product lifecycle governance (NPI, configuration management), executive-level communication, data-driven decision making.
Preferred skills
FPGA/semiconductor/embedded systems experience, hardware/firmware development tools, IEC 62443/ISO/SAE 21434/ISO/IEC 27001/ISO 26262 standards, NIST Cybersecurity Framework, Common Criteria, Software Bill of Materials (SBOM) governance, CE marking support, technical-file development.
Technologies
FPGA, embedded firmware, software development tools, intellectual property, reference designs, vulnerability management systems, QMS audit systems, product lifecycle management systems.
Responsibilities
Maintain enterprise CRA compliance framework and governance model; establish traceability between CRA requirements and product design/verification; coordinate alignment with ISO/IEC 27001, IEC 62443, ISO/SAE 21434, and ISO 26262; monitor regulatory developments and delegated acts; partner with cross-functional teams to determine product classification and conformity assessment pathways; integrate CRA requirements into product lifecycle and release management systems; lead development of CRA conformity-assessment framework and technical documentation; define compliance check requirements across product stages; partner on vulnerability escalation and non-conformity management; establish compliance metrics and dashboards; develop CRA training and competency requirements.
Seniority
Senior, hands-on IC with strategic oversight
