Product Security and Regulatory Expert

1 month, 1 week ago
Senior
Cybersecurity
Vailexa Technology

Vailexa Technology

Vailexa Technology specializes in staff augmentation services, offering tailored IT solutions for both short and long-term staffing needs, project management, and direct placement.

Internet Software & Services
11-50

Description

  • Interpret global and regional regulations and operationalize them as technical controls and standards.
  • Design and implement controls across infrastructure, cloud, network, application, and data environments.
  • Conduct control testing, gap assessments, risk assessments, and remediation planning.
  • Lead internal and external audits, including evidence collection and auditor responses.
  • Automate compliance validation using CSPM, SIEM, GRC, and related tools.
  • Monitor global regulatory changes and assess their impact on IT systems.
  • Establish repeatable compliance processes and support adherence across countries and regions.
  • Maintain risk registers and remediation roadmaps, and contribute to policy and technical standards documentation.
  • Partner with legal, risk, audit, security, and regional IT teams to maintain a consistent compliance posture.
  • Provide executive-level reporting on compliance risks and posture.

Requirements

  • 7+ years of experience in product security, IT compliance or regulatory compliance, product, or IT security.
  • Deep expertise in EU CRA, EU RED, and IEC 62443.
  • Strong understanding of AWS, Azure, or GCP cloud environments.
  • Knowledge of enterprise networking, identity and access management, data protection, encryption, logging, monitoring, and security tooling.
  • Experience leading or supporting external audits.
  • Ability to translate legal and regulatory requirements into technical requirements.
  • Strong documentation, stakeholder communication, and executive communication skills.
  • Experience operating in complex, matrixed global organizations and making risk-based decisions.
  • Experience in regulated industries such as financial services, healthcare, defense, or telecommunications preferred.
  • CISA, CRISC, CISSP, or ISO 27001 Lead Implementer/Lead Auditor certification preferred; GRC platform and cross-border data compliance experience also preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
3 days, 3 hours ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
3 days, 3 hours ago

Regulatory Affairs Specialist

MANSCAPED 51-250 Personal Products

MANSCAPED is seeking a Regulatory Affairs Specialist to support the Senior Manager, Regulatory by maintaining global compliance for its cosmetics, personal care, grooming, electrical, battery, accessory, and packaging products.

3 days, 4 hours ago

ABA Director of Credentialing

Coyne & Associates 51-250 Diversified Consumer Services

The Director of Credentialing & Provider Enrollment will lead credentialing, enrollment, contracting, compliance, and accreditation operations for a growing ABA therapy organization serving children and adolescents across four affiliated companies in 10 states.

Salesforce
3 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers