Product cybersecurity certification specialist

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/79i2nd

Product Cybersecurity Certification Specialist Role Description We are looking for a Product Cybersecurity Certification Specialist to join our team, supporting evaluation activities, preparation, documentation development, and coordination with certification bodies to achieve and maintain product compliance with international standards IEC 62443-4-1, IEC 62443-4-2, and ISO/IEC 15408 (LVS evaluation and OCSI certification). Key Responsibilities 1. IEC 62443-4-1 Compliance Support the implementation and maintenance of the Secure Development Lifecycle (SDL) Collect evidence and prepare documentation required by evaluators Collaborate with development teams to ensure adoption of security practices (threat modeling, vulnerability management, secure coding, patch process) 2. IEC 62443-4-2 Compliance Analyze security requirements for IACS (Industrial Automation & Control Systems) components Perform technical verification of the product against requirements (authentication, encryption, logging, secure configuration, etc.) Support technical teams in designing compliant security mechanisms Prepare Security Technical Documentation (STIG, STR, conformance matrix, test report) 3. Security Evaluation and ISO/IEC 15408 Certification (Common Criteria)



Contribute to the definition and drafting of: Security Target (ST) Security Architecture Evidence for LVS evaluation Interface with evaluation bodies (LVS Lab) and with OCSI/ACN for certification Collect and manage evidence for functional and penetration testing Support GAP analysis against applicable Protection Profiles (PP) 4. Management and Reporting Monitor certification activities and milestones with evaluation bodies Prepare reports for internal teams and management Contribute to internal updates of product security compliance procedures Requirements Degree in Computer Engineering, Cybersecurity, Electronics, or equivalent Knowledge of standards:IEC 62443-4-1 IEC 62443-4-2 ISO/IEC 15408 (CC) ISO 27001 ISO 9001 Preferred Skills: Knowledge of: embedded operating systems Dev Sec Ops processes Soft Skills: Ability to translate regulatory requirements into technical specifications Strong technical documentation writing skills Location : RomeRemote : Yes Gyala is a company operating in the cybersecurity domain through the development and commercialization of a proprietary software solution with high technological and innovative content. #J-18808-Ljbffr

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/79i2nd