2 days ago
Cambridge, United KingdomStaff+
Responsibilities
- Monitor, evaluate, and interpret emerging product security regulations and standards, including the EU Cyber Resilience Act, NIS2, and U.S. cybersecurity labelling requirements.
- Translate cybersecurity regulations and standards into clear product and engineering requirements.
- Lead regulatory risk assessments and gap analyses and identify actions needed to meet product security obligations.
- Develop and implement policies, frameworks, and processes supporting alignment with security regulations.
- Embed regulatory requirements and Secure-by-Design practices into Arm’s Secure Development Lifecycle.
- Partner with engineering and product teams to integrate compliance requirements throughout product development.
- Support incident response planning and regulatory reporting obligations.
- Develop guidance, training, and mentorship on product security regulations.
- Represent Arm in industry, regulatory, and standardisation activities.
Requirements
- Strong understanding of product security regulations, standards, and related communities, including the EU CRA, ENISA, UK PSTI, BSI, NIS2, and OpenSSF.
- Experience with Security Development Lifecycles and product security assurance, including requirements management, threat modelling, security testing, and incident response.
- Ability to interpret legal and regulatory text and translate it into actionable technical and engineering requirements.
- Experience collaborating across multidisciplinary engineering teams and communicating complex regulatory and security topics clearly.
- Experience in regulatory advocacy, industry working groups, or standards development is valued.
- Experience with security of embedded systems, semiconductors, or software supply chains is desirable.
- Knowledge of low-level software or hardware development and architecture is desirable.
- Experience with ISO 21434, IEC 62443, SESIP, or PSA Certified is desirable.
- Experience with semiconductor technologies such as SoCs, processor IP, or Compute Subsystems is desirable.
Benefits
- Relocation package, including visa sponsorship support, is available for candidates who require it.
- Hybrid working patterns are determined by teams, with role-specific details provided during the application process.
- Recruitment adjustments and accommodations are available upon request.
Categories
About Arm
Arm’s foundational technology is defining the future of computing. A future built by the greatest technology ecosystem in the world. A future built on Arm. Arm is everywhere technology matters. Technology matters everywhere. Together, we’ll power every technology revolution moving forward, including cloud computing, automotive and autonomous systems, IoT, the metaverse, and beyond. Changing the world. Again. On Arm.