Software Development Life Cycle (SDLC) Security and Compliance Lead

About the Role:

• Define and refine SDLC security and compliance processes to meet IEC 62443 and regulatory obligations.
• Act as the working lead for certifications, audits, and evidence preparation, representing Software Engineering.
• Track emerging requirements like the EU Cyber Resilience Act and coordinate internal readiness.

Key Responsibilities:

• Own Software Engineering process documentation and maintain traceability across code changes, reviews, tests, and customer tickets.
• Run internal readiness checks, gap assessments, and support ISO and CRA conformity audits.
• Manage the Software Engineering portion of the Coordinated Vulnerability Disclosure and incident management program.

Who You Are:

• You have a technical bachelor's degree and extensive experience in security or compliance auditing, with a relevant certification like CISSP or ISA/IEC 62443 Cybersecurity Expert.
• You excel at policy and process documentation and communicating with executive leadership.
• You have experience delivering software in regulated environments and managing incident or vulnerability disclosure programs.

Benefits:

• 100% employee-covered medical, dental, and vision insurance.
• Paid time off, 401k with match, and a supportive work-life balance culture.