About The Role

Important IT company At the Latin American level, growth requires

CRA Compliance & Product Security Engineer

Position Summary

We are seeking a CRA Compliance & Product Security Engineer to support the organization in meeting European Cyber Resilience Act (CRA) requirements while strengthening product security throughout the product lifecycle.

The ideal candidate combines regulatory/compliance knowledge with hands-on product security and software engineering experience , and can translate regulatory requirements into practical security controls, engineering processes, and product requirements.

Required Experience & Expertise

Bachelor’s degree in Computer Science, Cybersecurity, Information Systems , or a related field.
3+ years of experience in Product Security, Cybersecurity, Compliance, or Secure Software Engineering.
Strong understanding of the EU Cyber Resilience Act (CRA) and its relationship with regulations/frameworks such as NIS2 .
Experience with Product Security / Secure SDLC , including security requirements, threat/risk assessment, security testing, and vulnerability management.
Familiarity with hardware and software architectures , cybersecurity risks, and security controls.
Hands-on knowledge of CVE/vulnerability management , vulnerability assessment, remediation tracking, and security incident response.
Understanding of cryptography, secure data erasure, authentication, access control, and secure communications .
Experience translating regulatory and security requirements into technical requirements, engineering processes, and actionable controls .
Strong experience working cross-functionally with Engineering, Product, Software Development, QA, Legal, Compliance, and Security teams .

Key Responsibilities

Assess products and development processes against CRA requirements and identify compliance gaps.
Translate regulatory requirements into product security requirements and engineering controls .
Support vulnerability management, including CVE identification, risk assessment, remediation, and reporting .
Contribute to Secure SDLC, threat modeling, security testing, and risk assessments .
Support preparation and maintenance of security/compliance documentation and technical evidence.
Partner with Engineering and Product teams to ensure security and compliance requirements are addressed throughout the product lifecycle .
Monitor changes in relevant cybersecurity regulations and standards and assess their impact on products and processes.

Preferred Qualifications

CISSP, CISM , or equivalent cybersecurity certification.
CRA-specific training/certification, such as CybResActTPro , is highly desirable.
Experience with IoT, connected products, embedded systems, industrial products, or other regulated technology products .
Experience with international cybersecurity standards and frameworks such as ISO 27001, IEC 62443, NIST, or similar .

ADVANCED CONVERSATIONAL ENGLISH AND SPANISH ESSENTIAL (Will be evaluated).
If you are a foreingner residing in Mexico, you must have a valid INE, CURP, NSS and RFC.
Job type : Remote
Location : México.
Salary : $110,000 gross
Benefits : Excellent superior benefits.