Key Skills

Job Description

We are seeking an experienced Senior Security Architect to lead an embedded product portfolio through regulatory compliance under the EU Cyber Resilience Act (CRA) and IEC 62443 standards. In this role, you will take ownership of evaluating the current security posture of complex embedded systems—spanning both modern hardware and legacy platforms—used in industrial and environmental automation. You will define the roadmap, specify architectural updates, and guide engineering teams and leadership toward full compliance before the regulatory deadlines take effect. Key Responsibilities Security Posture Assessment: Conduct comprehensive security assessments across the existing portfolio of embedded products, identifying vulnerabilities and architectural constraints in legacy and next-generation systems. Regulatory & Standards Gap Analysis: Map product architectures, firmware implementations, and development lifecycles against the requirements of the EU Cyber Resilience Act (CRA) and IEC 62443. Remediation Roadmap: Define, design, and prioritize concrete architectural, product-level, and process-level changes required to achieve compliance. Strategic Advisory: Serve as the subject matter expert advising cross-functional engineering teams, product managers, and executive stakeholders on actionable compliance pathways. Autonomous Execution: Drive the initiative end-to-end with high autonomy, establishing milestones and delivering strategic recommendations within a defined timeframe. What You Bring Senior Architecture Experience: Proven track record as a Security Architect specializing in embedded systems, firmware security, or industrial IoT/OT environments. Standards Expertise: Deep, hands-on familiarity with IEC 62443, specifically: IEC 62443-4-1 (Secure Product Development Lifecycle Requirements) IEC 62443-4-2 (Technical Security Requirements for IACS Components) Regulatory Knowledge: Solid working understanding of the EU Cyber Resilience Act (CRA) and its statutory obligations for product manufacturers. Legacy System Navigation: Demonstrated ability to assess, adapt, and secure existing/legacy embedded architectures, not just greenfield designs. Delivery Track Record: Experience successfully leading organizations from initial security gap analysis to regulatory or standards compliance against hard deadlines. Stakeholder Management: Exceptional communication skills with the ability to bridge low-level technical discussions with firmware engineers and high-level risk briefings with senior management. Nice to Have Familiarity with building automation, environmental control systems, or industrial control systems (ICS/SCADA). Direct experience handling third-party product security certifications or conformity assessment procedures.

Core Responsibilities

Assess the security posture of embedded products and map their architectures, firmware, and development lifecycles against the EU Cyber Resilience Act and IEC 62443 requirements. Define and prioritize remediation roadmaps, advise engineering teams and leadership, and drive the compliance initiative through to delivery.

Requirements

Requires proven senior security architecture experience in embedded systems, firmware security, or industrial IoT/OT, with hands-on expertise in IEC 62443-4-1 and IEC 62443-4-2 and working knowledge of the EU Cyber Resilience Act. Candidates should have experience securing legacy systems, leading compliance efforts to deadlines, and communicating effectively with technical teams and senior stakeholders.