Product Cybersecurity Regulatory Analyst

Andersen is hiring a Product Cybersecurity Regulatory Analyst for a project monitoring US cybersecurity and data privacy regulations, assessing compliance risks, and supporting regulatory alignment.

The customer is a European company operating in the technology and engineering sector, providing specialized products and solutions for various industrial applications. The company focuses on innovation, operational efficiency, and supporting technological development across

The project is focused on monitoring and analyzing US federal and state regulations related to cybersecurity, data privacy, and connected devices. It aims to assess regulatory changes and their impact on product compliance, identify potential risks, and provide consolidated reporting to support informed decision-making and regulatory alignment.

Responsibilities:

• Monitoring US federal regulatory sources quarterly, including FCC equipment authorization and Cyber Trust Mark, NIST/OMB IoT guidance, NHTSA vehicle cybersecurity, and CPSC, as well as relevant state-level connected-device, AI, and privacy laws.

• Assessing the applicability of new and amended regulations to the client's product categories, including hardware, embedded software, and cloud services, with a particular focus on distinguishing between consumer and B2B/industrial requirements.

• Preparing and contributing US regulatory updates, findings, and recommendations to the consolidated quarterly report.

Must-haves:

• Experience in tracking US federal rulemaking and multi-state legislation in product or tchnology regulation (IoT, connected devices, wireless equipment) for 3+ years.

• Working knowledge of FCC equipment authorization (Part 15) and the U.S. Cyber Trust Mark program, state connected-device laws (CA SB-327, Oregon); awareness of NHTSA vehicle cybersecurity guidance and state AI laws (Colorado, California, Illinois).

• Familiarity with US state privacy laws (CCPA/CPRA) as they apply to device data (e.g. geolocation…