Senior Program Manager, EU Cyber Resilience Act (CRA)

Description

The team is building the company's enterprise approach to CRA compliance, a role that sits across cybersecurity, engineering, product compliance, quality and legal.

The company makes memory and storage products. The company describes its mission as transforming how information is used to improve life for everyone.

Responsibilities

• Build and carry out the enterprise strategy and roadmap for CRA compliance, keeping it aligned with business priorities and regulatory requirements.
• Run cross-functional programs that bring cybersecurity, engineering, product compliance, quality and legal requirements into product development and lifecycle processes.
• Turn regulatory obligations into business, technical and operational requirements, and drive their implementation across several organizations.
• Set up governance frameworks, metrics, dashboards and executive reporting to show compliance readiness and how well the program is working.
• Lead enterprise-wide gap assessments, risk mitigation, remediation planning, audits and regulatory readiness reviews.
• Track changes in cybersecurity regulations, industry standards and enforcement, and advise leadership and collaborators on them.
• Work with internal and external collaborators, including customers, auditors, industry groups and regulators, to meet compliance goals.
• Improve processes through automation and approved AI-enabled tools that make work more efficient, visible and well-informed.

Requirements

• Hold a bachelor's degree in engineering, computer science, cybersecurity, information systems, business, regulatory affairs or a related field.
• Have 8+ years of experience leading large-scale programs in cybersecurity, product compliance, regulatory affairs, quality systems, engineering or related fields.
• Have a record of leading complex cross-functional work in a global organization and influencing collaborators without direct authority.
• Understand product development lifecycle processes and enterprise governance frameworks well.
• Communicate clearly, present to executives, solve problems and manage collaborators well.

Conditions

Preferred: a master's degree in engineering, cybersecurity, business administration or a related field.

Preferred: experience leading compliance programs involving the EU Cyber Resilience Act (CRA), CE marking or other global regulatory frameworks.

Preferred: knowledge of NIST CSF, Common Criteria, Secure Development Lifecycle (SDL) methods, ISO/IEC standards, RoHS, REACH and TSCA.

Preferred: experience in semiconductor, storage, firmware, embedded systems, electronics or other highly regulated technology environments.

Preferred: professional certifications such as PMP, PgMP, CISSP or CISM.

This is a full-time role. The US base salary range Micron estimates for it is $113,000.00 to $254,000.00 a year. Pay within that range depends on work location, knowledge, skills, experience, tenure and relevant education or training, and the scale may change with business needs. The range covers base salary only, not bonus, equity or benefits. The recruiter can share the range for your preferred location.

Equal opportunity and legal notices apply, including the right to work and the company's rules on child labor and recruitment fees.

Benefits

• Medical, dental and vision plans are offered in all locations, so you can choose the plans that fit your family and budget.
• Income protection if you cannot work due to illness or injury, paid family leave, a generous paid time-off program and paid holidays.
• Additional compensation may include bonuses and equity.