CRA Compliance Technical Lead - Cork, Ireland

Company:

QT Technologies Ireland Limited

Job Area:

Engineering Group, Engineering Group > Security Engineering

General Summary:

As a CRA Compliance Technical Lead, you will play a critical role in helping ensure our products align with Cyber Resilience Act (CRA) expectations and broader product security compliance obligations. This role is well suited for a hands-on technical security and compliance leader who can translate evolving regulatory requirements into practical, scalable engineering actions and automated compliance capabilities across product development, vulnerability detection, vulnerability management, documentation, evidence collection, reporting, and governance workflows.

Your primary focus will be technically leading the establishment, maintenance, and day-to-day operation of compliance automation for CRA-related requirements.

Key Responsibilities:

• You will work closely with the rest of the product security organization, as well as with the standards organization and different engineering and release management teams, to interpret partially defined or changing requirements, map them to existing technical processes, identify gaps, and drive automated, repeatable mechanisms that help teams execute and demonstrate compliance over time.

• You will help establish and maintain a structured compliance framework for product security governance, with a strong emphasis on automating evidence collection, control monitoring, and documentation.

• Part of this role is translating regulatory language into actionable engineering, operational, and automation requirements. You will partner with technical teams to embed compliance expectations into the product lifecycle. You will also collaborate with stakeholders to improve traceability between requirements and implemented controls, automated checks, and retained evidence.

• You will work extensively with compliance artifacts and supporting systems, including risk registers, issue trackers, vulnerability records, SBOM-related materials, and reporting dashboards.

• You will help build, adapt, and operate scalable automation-based mechanisms for collecting, organizing, validating, and reporting evidence that demonstrates compliance readiness.

• As a technical lead, you will provide technical direction across cross-functional initiatives, influence priorities, and help drive consistency in how CRA compliance is interpreted and implemented across teams. You should be comfortable working in ambiguous environments where requirements are still evolving, building structure where needed, changing tools and automation as expectations shift, and balancing regulatory rigor with practical engineering execution.

This is a hands-on, cross-functional technical leadership role that combines product security expertise, regulatory understanding, automation engineering and ownership, process design, and strong execution through influence. You will play a key role in strengthening our ability to efficiently demonstrate compliance across teams and scale repeatable product security governance across the organization.

Required Qualifications

• Strong proven experience in cybersecurity engineering compliance, product security governance, security architecture, security program management, or related technical roles supporting regulated product development.

• Proven experience establishing, maintaining, and operating automation, integrations, and reporting mechanisms that support compliance, governance, or evidence collection.

• Current or past demonstrable experience in hands-on technical engineering work (such as software development or system architecture) of embedded or client systems.

• Demonstrated understanding of the Cyber Resilience Act (CRA) and its implications for software and hardware products, secure development, and vulnerability detection and handling.

• Experience translating regulatory requirements into actionable technical requirements, engineering controls, automation requirements, and operational implementation guidance.

• Proven ability to technically lead cross-functional compliance initiatives, including driving execution through influence without direct authority.

• Strong interpersonal skills and the ability to coordinate work across multiple teams, build trust, follow up persistently, and get results from teams that do not report to the role.

• Familiarity with secure software development lifecycle practices and how security requirements are embedded into engineering workflows.

• Experience supporting vulnerability detection, vulnerability management, prioritization, remediation tracking, and related governance processes.

• Ability to define evidence requirements and manage compliance artifacts in a structured, audit-ready manner.

• Exceptional written communication skills.

Preferred Qualifications

• Experience with product security compliance programs involving regulations or frameworks such as CRA, RED, NIS2, IEC 62443, ISO/IEC 27001, ISO/SAE 21434, or similar security-focused requirements.

• Experience working with internal or external audits, conformity assessments, and regulator-facing evidence preparation.

• Familiarity with issue tracking and documentation systems for compliance monitoring and reporting.

Where you will be working

Cork has a proud reputation as Ireland's second largest economic engine and is now one of the Top 20 location choices in Europe with 39,000 people being employed by over 170 overseas companies.
There's a growing diversity in the region with people from many nationalities relocating to Cork, relishing the opportunity to work and live in a location that offers an excellent quality of life.
A gateway to Europe, Cork airport provides access to almost 50 international destinations including transatlantic air routes.

Equal Opportunities
We are an Equal Opportunity employer; all qualified applicants will receive consideration for employment without regard to race, colour, religion, sexual orientation, gender identity, national origin, disability, veteran status, or any protected classification.

What's on Offer

Apart from working in an open, relaxed and collaborative space, you will enjoy:

• Salary, stock and performance related bonus

• Maternity/Paternity Leave

• Employee stock purchase scheme

• Matching pension scheme

• Education Assistance

• Relocation and immigration support (if needed)

• Life, Medical, Income and Travel Insurance

• Subsidised memberships for physical and mental well-being

• Bicycle purchase scheme

• Employee run clubs, including, running, football, chess, badminton + many more

Minimum Qualifications:

• Bachelor's degree in Engineering, Information Systems, Computer Science, or related field and 6+ years of Software Engineering or related work experience.
OR
Master's degree in Engineering, Information Systems, Computer Science, or related field and 5+ years of Software Engineering or related work experience.
OR
PhD in Engineering, Information Systems, Computer Science, or related field and 4+ years of Software Engineering or related work experience.

• 3+ years of work experience with Programming Language such as C, C++, Java, Python, etc.

*References to a particular number of years experience are for indicative purposes only. Applications from candidates with equivalent experience will be considered, provided that the candidate can demonstrate an ability to fulfill the principal duties of the role and possesses the required competencies.

Qualcomm expects its employees to abide by all applicable policies and procedures, including but not limited to security and other requirements regarding protection of Company confidential information and other confidential and/or proprietary information, to the extent those requirements are permissible under applicable law.

To all Staffing and Recruiting Agencies:Our Careers Site is only for individuals seeking a job at Qualcomm. Staffing and recruiting agencies and individuals being represented by an agency are not authorized to use this site or to submit profiles, applications or resumes, and any such submissions will be considered unsolicited. Qualcomm does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to our jobs alias, Qualcomm employees or any other company location. Qualcomm is not responsible for any fees related to unsolicited resumes/applications.

If you would like more information about this role, please contact Qualcomm Careers.