Product Cybersecurity Regulatory Analyst

Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment. 

The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across multiple industries. 

The project is focused on monitoring and analyzing US federal and state regulations related to cybersecurity, data privacy, and connected devices. It aims to assess regulatory changes and their impact on product compliance, identify potential risks, and provide consolidated reporting to support informed decision-making and regulatory alignment. 

Responsibilities: 

• Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.  

• Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements. 

• Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report. 

Must-haves: 

• Experience in tracking US federal rulemaking and multi-state legislation in product or technology regulation (IoT, connected devices, wireless equipment) for 3+ years. 

• Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program, state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois). 

• Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation, video/audio). 

• Comfortable judging consumer vs B2B applicability and flagging uncertainty instead of concluding. 

• Level of English – from Upper-Intermediate and above. 

Reasons why this job would be interesting to you: 

• Andersen cooperates with such businesses as Samsung, Reuter Gruppe, T-Systems, TUI, Ryanair, Johnson & Johnson, etc. This project is just your beginning here – working with us means reliability and prospects. 

• We have been strengthening our expertise since 2007. During this time, we have formed an excellent BA & SA team with streamlined processes, which now consists of more than 200 qualified analysts. 

• We welcome specialists from every part of the world. 

• We give our employees an opportunity to attend and participate in the company’s BA meetups, as well as offer a compensation program for international professional certificates. 

• There are many different ways to grow and develop at our company. You can improve as a tech specialist or a resource manager, and all your activities will be decently rewarded. 

• You will have an opportunity to take on the role of a mentor and help a group of BA/SA beginners grow. 

• Our employees have access to Andersen Knowledge Base, where they can take courses in a variety of areas: the art of negotiation, PreSale & Discovery, Agile essentials, product ownership, microservice architecture, API design, SQL, AWS, GDPR, UX/UI, people management, and more. 

Your personal data is protected in accordance with GDPR regulations. Learn more: https://andersenlab.com/privacy-policy

Join us! 

https://people.andersenlab.com/