Remote Api 936 Refractory Inspector Jobs (NOW HIRING)

Senior Consultant - Product Security & Compliance (Connected Products) 

Location:United States (Remote) 
Business Unit:Cyber Security 
 

Imagine your customer is a leading industrial component manufacturer, specializing in top-notch manufacturing and transportation equipment. You have ambitious goals: to streamline processes, ensure top-quality security for your client's products, and assure cybersecurity. That'swhereyou come in.Our analysis will bridge any gapsacross design, engineering, SDLC and technical control testing, and regulatory readiness, helping clients meet requirements such as the EU CRA, IEC 62443, and other product security standards.  

With our expertise in testing, inspection and independent security validation services, you willassistyour client in raising their cyber resilience like never before. Your success story? It's written in client readiness and satisfaction,secure products, and audit-defensible evidence. Now also imagine the same story, but for products such as vehicles, medical devices, ships, IoT products, network equipment,software products,etc. Doesn't it sound like an exciting mission? 

Bureau Veritas Cybersecurity provides cybersecurity services covering people, organization, technology,of products, and connected ecosystems. 

We have reputable clients and they request expertise to increase their level of cybersecurity, andregulatory readiness. 

Role Overview 

The Senior Consultant - Product Security & Compliance is adoer roleresponsible for deliveringproduct securityand compliance engagementswhile supporting the growth of Bureau Veritas'Cyber Security servicesacross North America. 

This role focuses on helping clientstranslate regulatory requirements for North American customers, into practical, engineering-aligned product security controls, harmonized with frameworks across sectors with current compliance standards and frameworks 

The individual will work acrossindustrial, IoT, embedded, software,medical technology, transportation,and cloud-connected product environments, supportingexecution of engagements, development of repeatable offerings, and business development activities. 

Key Responsibilities 

1. Client Engagement Delivery 

• Execute and support delivery ofproduct security consulting engagements, including:
  • Product security maturity assessments
  • CRA, IEC 62443, IoT security, automotive, medical device,- standards andregulatoryreadiness and gap assessments
  • Threat modeling,abuse case analysis,and product risk assessments
  • Secure architecturereview and security requirementdefinition for connected products
  • Secure product development lifecycle (PDL/SDL) and technical product technical requirements implementation support
  • Productsecurity, maturitymodelling,scoring, heatmaps, and remediation roadmaps
• Translateregulatory and standard requirements into engineering actions, test cases, control frameworks,and evidence expectations
• Producestructured, audit-defensible deliverablesaligned to BV methodologies 

2. Regulatory Harmonization & Product Security Compliance 

• Apply and operationalizeproduct cybersecurityregulatory frameworksacross engagements
• Support harmonization and implementation across product security regulations and standards, including:
• Regulatory Standards and Frameworks:
  • EU Cyber Resilience Act (CRA)
  • NIS2 Directive
  • Relevant North American IoT security initiatives (e.g., NIST, FCC,and related connected-device security expectations) 
• Secure Development Lifecycle & Process Standards:
  • IEC 62443-4-1
  • NIST Secure Software Development Framework (SSDF)
  • OWASP SAMM
  • ISO/IEC 27034and secure software engineering practices 
• Technical Security Requirements & Baselines:
  • EU Common Criteria
  • IEC 62443-4-2
  • ETSI EN 303 645 (IoT security)
  • NIST IoT cybersecurity guidance
  • OWASP ASVS and API security frameworks 
• Software Supply Chain & SBOM:
  • SBOM standardsand formats(SPDX, Cyclone-DX)
  • NIST supply chain risk management guidance
• Sector-Specific Frameworks (as applicable):
  • ISO/SAE 21434 and UNECE R155/R156 (automotive)
  • FDA and MDCG cybersecurity guidance (medical devices)
  • ISO 14971 (medical risk management) 
• Develop and use:
  • Control mappings,and CRA/IEC/sector-specific requirement crosswalks
  • Evidence matrices, assessment checklists, and regulatory traceability models
  • Compliance scoring models,maturity models, heatmaps, and remediation roadmaps
  • Help clients move fromregulatory interpretation implementation verification readiness 

3. Product Security Engineering & Architecture Support 

• Support clients in securingconnected product architectures, including:
  • Embedded systems and firmware,device operating systems, and product interfaces 
  • Industrial and IoT devices,network equipment, and operational technology components
  • Software applications, APIs, andweb management interfaces
  • Cloud-connected product backends, andsupporting infrastructure 
• Contribute to:
  • Threat models
  • Security architecture definitions
  • Identity, communication, and data protection strategies 
• Assist in definingaligned technical product security requirementsand validation criteria mapped to EU CC, CRA, IEC 62443, OWASP, NIST, ETSI, and sector-specific expectations 

4. Security Verification & Validation Support 

• Contribute toproduct and system-level security validation activities,
• Support development oftest cases, validation frameworksand evidence packagesaligned to regulatory and standard requirements
• Help structure outputs intocertification and regulations ready evidence packages 

5. Business Development (Seller-Doer Expectation) 

• Support growth of product security,and regulatory complianceservices through:
  • Client discussions, technical solutioninganddiscovery workshops
  • Proposal development and responsesupport
  • Participation in discovery workshops and scoping sessions 
• Help position BV as atrusted partner for product security, CRA readiness,and connected-product assurance
• Contribute toservice offering development and reusable artifacts 

6. Capability Development & Team Contribution 

• Contribute to buildingrepeatable product security,and compliancemethodologies and templates
• Support development of:
  • Regulatory aligned frameworks
  • Product security assessment models
  • Testing and validation structures 
• Mentor junior consultants and support team knowledge development
• Collaborate with global BV teams and technical specialists 

Required Experience 

Core Experience 

• 6-10 years of experience in cybersecurity with exposure toproduct security,industrial systems,embedded systems, or connected devices
• Experience working inconsulting or client-facing delivery roles
• Hands-on involvement insecurity assessments, risk analysis,vulnerability management,or architecture engagements

Technical Competencies 

• Understanding of:
  • Threat modeling and risk assessment methodologies
  • Secure development lifecycle (SDL) concepts
  • Product and system security architecture
  • Software supply chain security (SBOM, SCA) 
• Knowledge ofvarious laws and regulationsrelated to cyber product security, as well as the current developments in this area.
• Exposure tosecurity testing techniques across device,firmware,application,hardware,or system layersis a strong plus 

Consulting & Personal Attributes 

• Strongstructured problem-solving,evidence review,and documentation skills
• Ability to balancetechnical depth with client communication,and engineering practicality
• Results-oriented with aseller-doer mindset,and ability to support business development
• Comfortable working acrossmultiple industries, product types, and stakeholder groups
• Willingness to travel for onsite engagements as needed 

Preferred Experience 

• Experience delivering IEC 62443, IoT security, automotive cybersecurity, medical-device cybersecurity,  
• Experience in technical operations of areas such as SBOM, PSIRT,standards and regulatory readiness,
• Experience creating control mappings, evidence matrices, requirement crosswalks, assessment checklists, report templates, or regulatory-readiness frameworks
• Relevant certifications such as CISSP, CSSLP, GICSP, ISA/IEC 62443 certificates, ISO 27001 Lead Implementer/Auditor, or equivalent practical experience are helpful but not mandatory 

WHAT CAN YOU EXPECT FROM US? 

We are an organization with a strong focus ontechnical cybersecurity,delivering high-quality technical services in the field of digital security. You will be part of a team of motivated international specialists, whereknowledge exchange is highly valued. 

At Bureau Veritas Cybersecurity, we provide an environment for you to develop your talents and stimulate your professional growth. Together, we work to safeguard thesecurity and integrity of valuable data while facing the challenges of the ever-evolving digital world.Bureau Veritas Cybersecurity is a fast-growing company with ambitious goals.You will have the opportunity to grow along with us and shape your career allowing you to become an expert in your field. 

In terms of content, we offer you a diverse portfolio of exciting clients and projects. We are part of Bureau Veritas, which means that international opportunities are expanding, both for project work and for advancing your career. 

ARE YOU THE PRODUCT SECURITY CONSULTANT WE ARE LOOKING FOR?We would love to hear from you. Do you have questions or do you want to submit your CV?You can reach us through our website or reach out to us onjobs.cybersecurity@bureauveritas.com