Senior Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide and facilitate product security consulting engagements.

• Carry out product security maturity assessments and compliance readiness assessments for CRA, IEC 62443, IoT security, automotive, and medical devices.

• Execute threat modeling, abuse case analysis, and product risk evaluations.

• Analyze secure architectures and establish security requirements for connected products.

• Assist in the secure product development lifecycle and implementation of technical product requirements.

• Create product security maturity models, scoring systems, heatmaps, and remediation roadmaps.

• Convert regulatory and standard requirements into actionable engineering tasks, test scenarios, control frameworks, and evidence expectations.

• Generate structured, audit-compliant deliverables in alignment with Bureau Veritas methodologies.

• Implement and standardize product cybersecurity regulations and standards across various engagements.

• Develop control mappings, requirement crosswalks, evidence matrices, assessment checklists, traceability models, scoring models, maturity models, heatmaps, and remediation roadmaps.

• Assist in security architecture, threat modeling, identity management, communication, and data protection strategies for embedded, industrial, IoT, software, cloud-connected, and other products.

• Aid in product and system-level security validation, including test cases, validation frameworks, and certification-ready evidence packages.

• Engage in client interactions, technical solution development, discovery workshops, proposal creation, response support, and scoping sessions.

• Contribute to the development of service offerings, reusable artifacts, methodologies, templates, and testing frameworks.

• Mentor junior consultants and collaborate with global Bureau Veritas teams and technical experts.

• Foster the growth of Bureau Veritas Cyber Security services across North America.

⛳️ Requirements

• 6–10 years of experience in cybersecurity, particularly in product security, industrial systems, embedded systems, or connected devices.

• Experience in consulting or client-facing delivery roles.

• Practical involvement in security assessments, risk analysis, vulnerability management, or architectural projects.

• Familiarity with threat modeling and risk assessment methodologies.

• Knowledge of secure development lifecycle (SDL) principles.

• Understanding of product and system security architecture.

• Awareness of software supply chain security, including SBOM and SCA.

• Knowledge of laws and regulations concerning cyber product security and current industry developments.

• Strong structured problem-solving, evidence evaluation, and documentation abilities.

• Capability to balance technical depth with client communication and engineering practicality.

• Results-driven seller-doer attitude with the ability to support business development.

• Comfort working across various industries, product categories, and stakeholder groups.

• Willingness to travel for onsite engagements as required.

• Preferred experience in delivering IEC 62443, IoT security, automotive cybersecurity, or medical-device cybersecurity.

• Preferred background in SBOM, PSIRT, standards, and regulatory compliance.

• Preferred experience in creating control mappings, evidence matrices, requirement crosswalks, assessment checklists, report templates, or regulatory-readiness frameworks.

• Certifications such as CISSP, CSSLP, GICSP, ISA/IEC 62443, or ISO 27001 Lead Implementer/Auditor are advantageous but not required.

🏝️ Benefits

• Competitive salary and benefits package.

• Opportunities for professional growth and development.

• A diverse range of clients and projects.

• International opportunities for project work and career progression.

• Knowledge sharing with international specialists.

• Chance to become an expert and influence your career path.

• Disability assistance with job searching and application processes.