3 days ago
Base Salary
$152k - $222k/yr
Responsibilities
- Lead Cyber Resilience Act readiness assessments and translate regulatory requirements into technical controls, implementation plans, and remediation priorities.
- Build and improve security and compliance engineering capabilities, including automated evidence collection, control-as-code, dashboards, and continuous monitoring.
- Assess sovereign cloud designs, AI capabilities, data flows, and third-party dependencies for security, privacy, and regulatory risks.
- Support audits, risk reporting, certifications, regulatory examinations, and sustainable security and compliance practices.
- Manage complex, multifaceted initiatives across engineering, cloud infrastructure, legal, privacy, audit, and other stakeholder teams.
Requirements
- At least 7 years of experience in security engineering, product security, cloud security, compliance engineering, GRC engineering, or a related field.
- Experience managing complex, multifaceted initiatives with multiple stakeholders.
- Experience performing security, regulatory, and control-gap assessments and supporting audits, certifications, assessments, or regulatory examinations.
- Experience converting regulatory or policy requirements into technical controls and measurable evidence.
- Working knowledge of the EU Cyber Resilience Act, EU AI Act, GDPR and data-governance principles, ISO 27001, ISO 42001, SOC 2, NIST Cybersecurity Framework, or NIST AI RMF.
- Preferred experience with AI/ML security, model-risk management, algorithmic impact assessments, or responsible AI governance.
- Preferred experience working with regulators, notified bodies, external auditors, or enterprise customer assurance teams.
- Relevant certifications such as CISSP, CISM, CCSP, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor, or equivalent experience.
- Preferred software development or scripting experience in Python, Go, JavaScript, or similar languages.
Benefits
- Fully remote role performed from within the United States, requiring reliable internet access and independent work capability.
- Medical, dental, and vision insurance; 401(k) with Cisco matching contribution; paid parental leave; disability coverage; and basic life insurance, subject to eligibility.
- Potential eligibility for Cisco restricted stock unit grants and annual bonuses for non-sales roles.
- Paid holidays, vacation or flexible time off, sick time, wellness days, birthday leave, year-end shutdown, family emergency leave, and optional paid volunteer days.
Tech Stack
Categories
About Cisco
Cisco designs and sells networking, security, and collaboration platforms for enterprises, service providers, and governments, spanning routers and switches, Wi‑Fi, firewalls, zero‑trust, observability, and cloud-managed IT (Meraki) plus Webex. Its business model mixes hardware, software subscriptions, and support/consulting services. Founded in 1984 and headquartered in San Jose, California, Cisco is a public company traded on Nasdaq and serves customers across data centers, campuses, and service provider networks.