Product Security Compliance Program Analyst

Job Description

Product Security Compliance Program Analyst:
On behalf of our Consulting client, Procom is searching for a Product Security Compliance Program Analyst for a 6 month contract engagement role. This position is a remote position based in Toronto, Ontario, Canada.

Product Security Compliance Program Analyst - Job Description:
The Product Security Compliance Program Analyst is responsible for coordinating the governance, compliance, and execution of the Product Security Program. This role supports various cybersecurity initiatives including the Secure System Maturity Framework (SSMF), IEC 62443-4-1 certification, and European Union Cyber Resilience Act (CRA) compliance to ensure secure, resilient, and compliant product delivery.

Product Security Compliance Program Analyst - Responsibilities:
• Coordinate strategic Security Engineering & Governance initiatives across multiple business units.
• Develop and maintain integrated program plans, milestones, dependencies, and deliverables.
• Facilitate governance meetings and maintain action item tracking.
• Monitor program health and escalate risks requiring leadership attention.
• Support uptake and tracking of SSMF requirements across engineering organizations.
• Maintain compliance evidence and audit artifacts.
• Monitor emerging cybersecurity regulations and communicate their impact to stakeholders.

Product Security Compliance Program Analyst - Mandatory Skills:
• Project management experience with the ability to manage stakeholders and drive execution.
• Strong technical/security-compliance knowledge and project management capability.
• Strong communication and negotiation skills.
• Bachelor’s degree in Business, Engineering, Computer Science, Information Systems, Cybersecurity, or related discipline.
• 3–5 years of experience in program management, compliance, governance, project management, or cybersecurity operations.
• Experience coordinating cross-functional technical initiatives.
• Proficiency with collaboration and project management tools such as Jira, Confluence, Microsoft Project.

Product Security Compliance Program Analyst – Nice-to-Have Skills:
• Experience supporting Secure Product Development Lifecycle (SPDLC) or Secure Software Development Lifecycle (SSDLC) initiatives.
• Familiarity with IEC 62443, EU Cyber Resilience Act (CRA), or NIST Secure Software Development Framework (SSDF).
• Experience supporting internal or external audits and certification programs.
• Knowledge of cybersecurity governance, risk management, and compliance (GRC) principles.
• Experience in semiconductor, embedded systems, industrial automation, or IoT product development.

Product Security Compliance Program Analyst – Assignment Length:
This is a contract engagement targeted at approximately six months to one year.

Product Security Compliance Program Analyst - Start Date:
ASAP.

Product Security Compliance Program Analyst - Assignment Location:
Remote position based in Toronto, Ontario, Canada.

This employer uses both human and technology-assisted tools to support candidate screening and assessment. Final hiring decisions are made by people.