Andersen Lab

Product cybersecurity regulatory analyst

In short

Senior-level analyst role monitoring US federal and state cybersecurity, IoT, and data privacy regulations (FCC, NHTSA, CPSC, CCPA/CPRA, state AI laws) for a European technology/engineering client, assessing regulatory applicability to hardware, embedded software, and cloud products and feeding findings into quarterly reports. Posted by Andersen, an IT outsourcing company, for an onsite full-time position requiring 3+ years of US regulatory tracking experience and Upper-Intermediate+ English. No salary specified.

Описание: Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment. The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across multiple industries.
Задачи:
•Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.
•Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements.
•Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report.
Требования:
•Experience in tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years.
•Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program; state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois).
•Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation, video/audio).
•Comfortable judging consumer vs B2B applicability and flagging uncertainty instead of concluding.
•Level of English – from Upper-Intermediate and above.
Условия:
•We give our employees an opportunity to attend and participate in the company's BA meetups, as well as offer a compensation program for international professional certificates.
•There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded.
•You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow.
•Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot