CRA Compliance Technical Lead

About the Role

We are seeking a CRA Compliance Technical Lead to join our product security team and ensure our offerings comply with the Cyber Resilience Act (CRA) and related security standards. This pivotal position involves hands-on technical leadership to establish, operate, and evolve automated compliance frameworks within product development, vulnerability management, documentation processes, and governance workflows.

Key Responsibilities

• Collaborate with product security, standards, engineering, and release teams to interpret evolving regulatory requirements, identify gaps, and develop automated, repeatable mechanisms to support compliance demonstration.
• Design and maintain structured compliance frameworks emphasizing automation of evidence collection, control monitoring, and documentation.
• Translate regulatory provisions into actionable technical and operational engineering controls, working closely with technical teams to embed expectations into product lifecycles and improve traceability between requirements, controls, automated checks, and retained evidence.
• Manage compliance artifacts and related systems such as risk registers, issue trackers, vulnerability databases, SBOM materials, and dashboards.
• Build and operate scalable automation tools for organizing, validating, and reporting evidence that confirms compliance readiness.
• Provide technical leadership for cross-functional initiatives, influencing priorities and establishing consistent interpretation and implementation of CRA compliance across teams in a dynamic environment.

Requirements

• Extensive experience in cybersecurity engineering compliance, product security governance, security architecture, or managing security programs for regulated product developments.
• Proven ability to establish and operate automation, integrations, and reporting systems supporting compliance and governance activities.
• Hands-on background in technical engineering roles, such as software development or system architecture, particularly in embedded or client systems.
• In-depth knowledge of the Cyber Resilience Act and its impact on software and hardware security development, vulnerability detection, and remediation.
• Skilled in translating regulatory mandates into practical technical requirements, engineering controls, automation criteria, and implementation guidelines.
• Demonstrated competence in leading compliance projects through influence, coordinating with multiple teams across organizational boundaries.
• Strong communication abilities and interpersonal skills to establish trust, coordinate work, and ensure follow-through in cross-team contexts.
• Familiar with secure software development lifecycles and embedding security requirements within engineering processes.
• Experience managing vulnerability detection and governance including prioritization, remediation tracking, and evidence documentation in audit-ready formats.

Preferred Qualifications

• Working knowledge of security compliance programs involving regulations or frameworks like CRA, RED, NIS2, IEC 62443, ISO/IEC 27001, ISO/SAE 21434, among others.
• Experience engaging with internal or external audits, conformity assessments, and preparing regulator-facing evidence documentation.
• Familiarity with issue tracking and documentation systems that support compliance oversight and reporting.

Educational Requirements

• Bachelor's degree in Engineering, Information Systems, Computer Science, or a related field coupled with at least 6 years of relevant software engineering or equivalent experience.
• Alternatively, a Master's degree with 5+ years or a PhD with 4+ years of pertinent experience is acceptable.
• At least 3 years of programming proficiency in languages such as C, C++, Java, or Python.

Additional Information

The role is based onsite in Cork, Ireland, a vibrant economic hub with a diverse international community and excellent connectivity, offering a high quality of life.

We uphold equal employment opportunities; candidates from all backgrounds will be considered regardless of race, gender, disability, or any protected status.

Our comprehensive benefits package includes competitive salary, stock options, performance bonuses, parental leave, pension matching, education support, relocation assistance, insurance coverage, wellness subsidies, bicycle purchase schemes, and a variety of employee clubs and activities.

Qualcomm is committed to providing accessible hiring processes and workplace accommodations for individuals with disabilities.

Applicants must comply with company confidentiality and security policies.

Please note that unsolicited resumes from agencies will not be accepted.