Security Compliance Expert (CRA Compliance)

About the Position

We are seeking a Security Compliance Expert to perform a high-level CRA (Cyber Resilience Act) compliance gap analysis against the OS Vertical requirements for enterprise-grade Linux products. In this role, you will identify compliance gaps, assess the feasibility of compliance, and provide input for future technical investigations, working with enterprise-grade Linux OS on the x86/x86_64 platform.

Responsibilities

• Produce a gap analysis spreadsheet/table with a requirement-by-requirement assessment
• Identify compliance risks and high-level problem areas without diving into implementation details
• Perform an initial feasibility assessment for non-compliant requirements
• Provide recommendations on areas requiring deeper technical investigation
• Review the current OS Vertical/ETSI documentation
• Map regulatory requirements to the selected product (initially REL 10 / Liberty Linux 10.x)
• Classify requirements as: Compliant, Potentially compliant with reasonable effort, or Not compliant/significant concern
• Participate in knowledge-transfer sessions with stakeholders
• Refine the analysis when newer versions of the OS Vertical become available, as the specification is still evolving and the exercise will need to be revisited

Requirements

• 3+ years of relevant experience in Security Compliance Assurance
• Understanding of product security and cybersecurity concepts in general
• Background in Security/Compliance Architecture
• Knowledge of product architecture and the lifecycle of the analyzed Linux distribution/product, along with product-level architecture understanding
• Experience working with standards, controls, or regulatory frameworks
• Capability to read, analyze, and interpret regulatory requirements from the OS Vertical document and map them to product capabilities
• Proficiency in performing compliance assessments focused on gap identification rather than solution engineering or detailed implementation design
• English level B1+ for effective communication

Nice to Have

• Familiarity with Linux platform engineering
• Knowledge of enterprise-grade Linux OS support on x86/x86_64 platforms

We Offer

• Opportunity to work with a leading technology company, EPAM Systems
• Remote work options
• Engaging in impactful projects that contribute to cybersecurity compliance

About the Company

EPAM Systems is a global software engineering and product development company. We partner with the world's leading brands to deliver innovative technology solutions.