Andersen Lab

Product Cybersecurity Regulatory Analyst

In short

This remote role involves monitoring and analyzing US federal and state regulations on cybersecurity, data privacy, and connected devices for a European technology and engineering company's products. It requires 3+ years of experience tracking US federal rulemaking and multi-state legislation on IoT, connected devices, and wireless equipment, along with knowledge of FCC Part 15, the US Cyber Trust Mark, state connected-device and AI laws, and CCPA/CPRA privacy rules. The analyst assesses regulatory applicability across hardware, embedded software, and cloud services, distinguishing consumer from B2B/industrial requirements, and contributes to a consolidated quarterly report. Upper-Intermediate English or higher is required.

About the Project
Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment.
The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across its operations.
The project is focused on monitoring and analyzing US federal and state regulations related to cybersecurity, data privacy, and connected devices. It aims to assess regulatory changes and their impact on product compliance, identify potential risks, and provide consolidated reporting to support informed decision-making and regulatory alignment.
Responsibilities
•Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.
•Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements.
•Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report.
Must-haves
•Experience in tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years.
•Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program, state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois).
•Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation, video/audio).
•Comfortable judging consumer vs B2B applicability and flagging uncertainty instead of concluding.
•Level of English – from Upper-Intermediate and above.
Reasons why this job would be interesting to you
•Andersen cooperates with such businesses as Samsung, Reuter Gruppe, T-Systems, UI, Ryanair, Johnson & Johnson, etc. This project is just your beginning here – working with us means reliability and prospects.
•We have been strengthening our expertise since 2007. During this time, we have formed an excellent BA & SA team with streamlined processes, which now consists of more than 200 qualified analysts.
•We welcome specialists from every part of the world.
•We give our employees an opportunity to attend and participate in the company's BA meetups, as well as offer a compensation program for international professional certificates.
•There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded.
•You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow.
•Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot