Product Security Lead

About the role

Our client seeks a Product Security Lead to build, own, and mature the product security program. The role will partner with an MSP to implement EU Cyber Resilience Act (CRA) compliance, then transition to full program ownership. The position reports to the CISO and is expected to evolve into a player-coach role with 1–2 direct reports as the program scales. This is a contract-to-hire opportunity; applicants must be willing and able to work on a W2 basis and convert to FTE following the contract duration. On-site presence is required Monday through Thursday in Irvine, CA to support internal customers across engineering, quality, legal, and related functions.

Responsibilities

• Serve as primary liaison to the MSP during the EU CRA compliance engagement.
• Coordinate engineering, product, legal, quality, and supply chain to meet MSP timelines and deliverables.
• Ensure timely provision of product architecture, SBOMs, and vulnerability handling information for CRA conformity assessments.
• Review and validate MSP outputs, including risk assessments, technical documentation, and gap analyses.
• Track CRA milestones, manage risks and blockers, and escalate issues to the CISO as needed.
• Build internal understanding of CRA obligations and conformity assessment pathways.