Cyber Security Compliance Lead

ADI Global is currently seeking a Product Security Compliance Lader to ensure that our products are secure and compliant throughout their lifecycle, covering design, production, and maintenance. Key responsibilities include assessing security controls against frameworks (e.g., NIST, ISO, IEC), managing product vulnerabilities, coordinating penetration tests, ensuring compliance with regulations like the Cyber Resilience Act, and fostering a "secure-by-design" culture within R&D

JOB DUTIES

• Liaise with stakeholders such as security, engineering and legal teams, vendors, and end-users regarding product compliance with internal security frameworks, adopted industry standards, and applicable cybersecurity regulation.
• Develop, implement, and enforce product security policies, procedures, white papers regarding product security posture.
• Monitor, interpret, and apply relevant laws and standards to products, such as CRA, RED, GDPR, CCPA, NIST RMF, ISO 27K, and how they impact ADI products.
• Stay updated on the latest IoT security trends, regulations, standards, and best practices, ensuring ADI policies and procedures remain current and effective.
• Conduct security audits, risk assessments, and vulnerability assessments to validate compliance.
• Analyze supply chains to ensure components meet safety and security requirements.
• Coordinate with engineering teams to handle security incidents and ensuring timely remediation.
• Interface with Legal and Marketing Communications group to manage communications of security vulnerabilities in Resideo products

YOU MUST HAVE

• Bachelor's degree in computer science, electrical engineering, mathematics, or similar discipline.
• A passion for product security and safety compliance so as to provide excellence to your stakeholders
• Excellent communication and leadership skills. An excellent level of English (written and spoken)
• Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders

WE VALUE

• Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP, CISSP, CISA
• Master's degree in computer science, electrical engineering, mathematics, or similar discipline
• Background in the legal field

WHAT'S IN IT FOR YOU

• Hybrid working model - 3 days in the office and 2 from home
• Competitive salary and benefits
• Supportive team with the opportunity to progress
• Opportunity to work for a global business
• High quality office environment with free gym, free parking and located in an easily accessible part of Oldham
• Access to LinkedIn Learning with thousands of expert-led courses to support your professional development

#LI-TC1

#LI-HYBRID