Senior Product Security Consultant- Advisory

Leads product security advisory engagements in Finite State's Strategic Advisory practice, reporting to the Head of Policy and Compliance and helping manufacturers of vehicles, medical devices, industrial and IoT products meet new cybersecurity rules. The consultant scopes and runs engagements, frames programmes for the EU Cyber Resilience Act, RED EN 18031, FDA 524B and the FCC Cyber Trust Mark, runs gap assessments, designs secure development programmes, and on some accounts serves as the client's virtual Chief Product Security Officer.

The consultant translates SBOM, vulnerability and pentest results from Finite State's engineers into regulatory terms. It asks for eight years of experience, five in consulting, sector depth in automotive, IoT, industrial or healthcare, and executive-level writing. Remote in the US with periodic travel.