h3Product Cybersecurity Certification Specialist /h3h3strongRole Description /strong /h3pWe are looking for astrong Product Cybersecurity Certification Specialist /strongto join our team, supporting evaluation activities, preparation, documentation development, and coordination with certification bodies to achieve and maintain product compliance with international standards IEC 62443-4-1, IEC 62443-4-2, and ISO/IEC 15408 (LVS evaluation and OCSI certification). /ph3strongKey Responsibilities /strong /h3pstrong1. IEC 62443-4-1 Compliance /strong /pulliSupport the implementation and maintenance of the Secure Development Lifecycle (SDL) /liliCollect evidence and prepare documentation required by evaluators /liliCollaborate with development teams to ensure adoption of security practices (threat modeling, vulnerability management, secure coding, patch process) /li /ulpstrong2. IEC 62443-4-2 Compliance /strong /pulliAnalyze security requirements for IACS (Industrial Automation Control Systems) components /liliPerform technical verification of the product against requirements (authentication, encryption, logging, secure configuration, etc.) /liliSupport technical teams in designing compliant security mechanisms /liliPrepare Security Technical Documentation (STIG, STR, conformance matrix, test report) /li /ulpstrong3. Security Evaluation and ISO/IEC 15408 Certification (Common Criteria) /strong /pulliContribute to the definition and drafting of:ulliSecurity Target (ST)
/liliSecurity Architecture /liliEvidence for LVS evaluation /li /ul /liliInterface with evaluation bodies (LVS Lab) and with OCSI/ACN for certification /liliCollect and manage evidence for functional and penetration testing /liliSupport GAP analysis against applicable Protection Profiles (PP) /li /ulpstrong4. Management and Reporting /strong /pulliMonitor certification activities and milestones with evaluation bodies /liliPrepare reports for internal teams and management /liliContribute to internal updates of product security compliance procedures /li /ulh3strongRequirements /strong /h3ulliDegree in Computer Engineering, Cybersecurity, Electronics, or equivalent /liliKnowledge of standards:ullistrongIEC 62443-4-1 /strong /lilistrongIEC 62443-4-2 /strong /lilistrongISO/IEC 15408 /strong (CC) /lilistrongISO 27001 /strong /lilistrongISO 9001 /strong /li /ul /li /ulh3strongPreferred Skills: /strong /h3pKnowledge of: /pulliembedded operating systems /liliDevSecOps processes /li /ulpstrongSoft Skills: /strong /pulliAbility to translate regulatory requirements into technical specifications /liliStrong technical documentation writing skills /li /ulpstrongLocation /strong: RomebrstrongRemote /strong: Yes /ppbrstrongGyala /strongis a company operating in the cybersecurity domain through the development and commercialization of a proprietary software solution with high technological and innovative content. /p #J-18808-Ljbffr
📌 Product Cybersecurity Certification Specialist (Roma)
🏢 Gyala
📍 Roma