Technical Regulations and Standards Engineer - Cybersecurity

Job Description Summary

The Technical Regulations and Standards Engineer for Cybersecurity is responsible for ensuring that the Operational Technology product cybersecurity comply with relevant industry specific standards and regulations. This role involves managing, mitigating and reporting vulnerabilities with the hardware or software cyber products. The Specialist will work closely with various development teams to maintain a robust security posture, conduct compliance audits, and implement risk management strategies to improve cyber posture of overall product portfolio.

Job Description

Roles and Responsibilities

• Reviews and understands the applicable standards required by Law in country that apply to the relevant products.
• Communicates standards to the design community and maintains it.
• May also participate with independent third parties to perform product compliance and certification work (testing, design review etc.) and communicates results/actions to the relevant engineering and supply chain team.
• Interacts with outside engineering firms or governmental agencies to provide or record product compliance to required regional or national standards to gain the needed product certification or qualification.
• Develop, implement, and monitor compliance with cybersecurity policies, procedures, and standards (e.g., IEC 62443, NERF CIP, ISO 27001, NIST).
• Perform regular vulnerability assessments and scans to identify security weaknesses in systems and applications.
• Conduct risk assessments to identify potential security threats and vulnerabilities.
• Support the incident response team in identifying, managing, and resolving security incidents.
• Support the incident response team in identifying, managing, and resolving security incidents.
• Maintain accurate and up-to-date records of compliance activities, vulnerability assessments, and remediation efforts.

• Bachelor's Degree in Mechanical, Electrical, Safety, or Industrial Engineering or similar field from an accredited college or university
• Minimum of 6 years relevant engineering experience in a design, systems, field operations, or product safety role

• Strong oral and written communication skills.
• Demonstrated ability to analyze and resolve problems.
• Ability to document, plan, market, and execute programs.
• Established project management skills.
• Preferred certifications include CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar.