Product Security and Regulatory Expert
Posted 1 Sep 2026
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7+ yrs
- Management level
- Individual contributor
- Employment
- Remote
No salary listed for this role.
CertificationsCISA, CRISC, CISSP, ISO 27001 Lead Implementer
Build More Than Just a Career. Build Your Future.
At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders.
We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.
Required Qualifications
-
7+ years of experience in product security, IT compliance/regulatory, product, IT security
-
Must have deep expertise of: EU CRA, EU RED, IEC 62443
-
Strong understanding of:
-
Cloud environments (AWS, Azure, GCP)
-
Enterprise networking
-
Identity & access management
-
Data protection and encryption technologies
-
Logging, monitoring, and security tooling
-
Experience leading or supporting external audits.
-
Ability to translate legal/regulatory language into technical requirements.
-
Strong documentation and stakeholder communication skills.
Preferred Qualifications
-
Experience in highly regulated industries (financial services, healthcare, defense, telecom).
-
Certifications such as:
-
CISA
-
CRISC
-
CISSP
-
ISO 27001 Lead Implementer / Lead Auditor
-
Experience with GRC platforms (ServiceNow GRC, Archer, OneTrust, etc.).
-
Experience managing cross-border data compliance and data residency requirements.
Regulatory & Technical Compliance
- Interpret and operationalize global and regional regulations into actionable technical controls.
- Translate regulatory requirements into technical standards for infrastructure, cloud, network, application, and data environments.
- Partner with legal, risk, audit, and security teams to ensure consistent global compliance posture.
Control Implementation & Validation
- Design and implement technical controls to meet regulatory requirements.
- Conduct control testing, gap assessments, and remediation planning.
- Lead internal and external audits; coordinate evidence collection and auditor responses.