Product Security and Regulatory Expert

Job Title: Product Security and Regulatory Expert
Location: Remote
Duration: 6 month contract with high intent to convert to FTE 
 
Required Qualifications

• 7+ years of experience in product security, IT compliance/regulatory, product, IT security
• Must have deep expertise of: EU CRA, EU RED, IEC 62443
• Strong understanding of:
  • Cloud environments (AWS, Azure, Google Cloud Platform)
  • Enterprise networking
  • Identity & access management
  • Data protection and encryption technologies
  • Logging, monitoring, and security tooling
• Experience leading or supporting external audits.
• Ability to translate legal/regulatory language into technical requirements.
• Strong documentation and stakeholder communication skills.

Preferred Qualifications

• Experience in highly regulated industries (financial services, healthcare, defense, telecom).
• Certifications such as:
  • CISA
  • CRISC
  • CISSP
  • ISO 27001 Lead Implementer / Lead Auditor
• Experience with GRC platforms (ServiceNow GRC, Archer, OneTrust, etc.).
• Experience managing cross-border data compliance and data residency requirements.

 
Regulatory & Technical Compliance

• Interpret and operationalize global and regional regulations into actionable technical controls.
• Translate regulatory requirements into technical standards for infrastructure, cloud, network, application, and data environments.
• Partner with legal, risk, audit, and security teams to ensure consistent global compliance posture.

Control Implementation & Validation

• Design and implement technical controls to meet regulatory requirements.
• Conduct control testing, gap assessments, and remediation planning.
• Lead internal and external audits; coordinate evidence collection and auditor responses.
• Automate compliance validation through tooling where possible (e.g., CSPM, SIEM, GRC platforms).

Global Program Management

• Support compliance strategy across multiple countries and regions.
• Monitor regulatory changes globally and assess impact to IT systems.
• Establish repeatable compliance processes for global rollouts.
• Work with regional IT leaders to ensure localized regulatory adherence.

Risk & Governance

• Perform risk assessments related to regulatory exposure.
• Maintain risk registers and remediation roadmaps.
• Support policy development and technical standards documentation.
• Provide executive-level reporting on compliance posture and risk.

Key Competencies

• Strong analytical and risk-based decision-making skills
• Ability to operate in complex, matrixed global organizations
• Executive-level communication capability
• Process-oriented mindset with automation focus
• Ability to balance regulatory rigor with business enablement

Please inform candidates that this is a contract role with your company and will be assigned to a third?party customer of World Wide Technology.
 
We’re committed to pay transparency. We ask that when posting a role with WWT please include a clear salary or pay range to support fairness and informed decisions.