Product Security Compliance Program Analyst

Fulcrum Technology Solutions is on the hunt for a Product Security Compliance Program Analyst to support a client in the IoT space. This individual will play a key role in driving secure product development initiatives, cybersecurity governance, and regulatory compliance across multiple engineering organizations.

This is an excellent opportunity for someone with a background in cybersecurity governance, GRC, compliance, or technical program management who enjoys working cross-functionally to improve security processes and ensure products meet evolving global cybersecurity requirements.

• What You'll Do
• Coordinate enterprise Product Security programs across Engineering, Product Management, Legal, Quality, and Information Security.
• Drive Secure Product Development Lifecycle (SPDLC) initiatives throughout the product lifecycle.
• Track compliance efforts related to cybersecurity standards and regulations.
• Maintain program plans, executive dashboards, KPIs, and governance reporting.
• Coordinate internal security reviews, audits, and compliance activities.
• Track remediation efforts resulting from penetration testing, threat modeling, and security assessments.
• Support vulnerability disclosure and vulnerability response processes.
• Monitor emerging cybersecurity regulations and communicate business impacts.
• Improve governance processes, reporting, compliance tracking, and operational efficiency.
• Partner with technical and business stakeholders to ensure security deliverables stay on schedule.

• Required Experience
• 3+ years of experience in one or more of the following:
• Product Security
• Cybersecurity Governance
• GRC
• Compliance
• Technical Program Management
• Security Operations
• Experience coordinating cross-functional technical initiatives.
• Strong project management and organizational skills.
• Experience creating executive reporting, dashboards, and program metrics.
• Excellent written and verbal communication skills.
• Experience using Jira, Confluence, Microsoft Project, or similar project management tools.
• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, Business, or a related field.

• Preferred Experience
• Experience with any of the following is highly desired:
• Secure Product Development Lifecycle (SPDLC)
• Secure Software Development Lifecycle (SSDLC)
• IEC 62443
• EU Cyber Resilience Act (CRA)
• NIST Secure Software Development Framework (SSDF)
• ISO/IEC 27001
• ISO/IEC 29147
• ISO/IEC 30111
• Governance, Risk & Compliance (GRC)
• Vulnerability Disclosure Programs (VDP)
• Penetration Testing coordination
• Threat Modeling
• Product Security metrics and reporting
• Audit and certification support

• Industry Experience
• Candidates with experience supporting any of the following environments are encouraged to apply:
• Embedded Systems
• IoT
• Semiconductor
• Industrial Automation
• Connected Devices
• Hardware Security
• Manufacturing Technology

• Preferred Certifications
• Security+
• CAPM
• PMP
• CISA
• Similar cybersecurity or project management certifications

• Why Apply?
• Work on enterprise Product Security initiatives.
• Collaborate with engineering and executive leadership.
• Help shape cybersecurity governance and compliance programs.
• Gain exposure to global cybersecurity regulations and secure product development.
• Join a collaborative environment focused on improving product security across the organization.

If you're interested in learning more, apply today or reach out directly to discuss the opportunity.