Security Compliance Expert (CRA Compliance)

We are seeking a Security Compliance Expert to perform a high-level CRA (Cyber Resilience Act) compliance gap analysis against the OS Vertical requirements for enterprise-grade Linux products. In this role, you will identify compliance gaps, assess the feasibility of compliance, and provide input for future technical investigations, working with enterprise-grade Linux OS on the x86/x86_64 platform. Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi. Responsibilities Produce a gap analysis spreadsheet/table with a requirement-by-requirement assessment Identify compliance risks and high-level problem areas without diving into implementation details Perform an initial feasibility assessment for non-compliant requirements Provide recommendations on areas requiring deeper technical investigation Review the current OS Vertical/ETSI documentation Map regulatory requirements to the selected product (initially REL 10 / Liberty Linux 10.x) Classify requirements as: Compliant, Potentially compliant with reasonable effort, or Not compliant/significant concern Participate in knowledge-transfer sessions with stakeholders Refine the analysis when newer versions of the OS Vertical become available, as the specification is still evolving and the exercise will need to be revisited Requirements 3+ years of relevant experience in Security Compliance Assurance Understanding of product security and cybersecurity concepts in general Background in Security/Compliance Architecture Knowledge of product architecture and the lifecycle of the analyzed Linux distribution/product, along with product-level architecture understanding Experience working with standards, controls, or regulatory frameworks Capability to read, analyze, and interpret regulatory requirements from the OS Vertical document and map them to product capabilities Proficiency in performing compliance assessments focused on gap identification rather than solution engineering or detailed implementation design English level B1+ for effective communication Nice to have Familiarity with Linux platform engineering Knowledge of enterprise-grade Linux OS support on x86/x86_64 platforms We offer We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to LinkedIn Learning and Udemy Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Five trust days per year (sick leave without a medical certificate) Benefits package (sports activities, a variety of stores and services) EPAM Georgia is a team of innovators united by a passion for technology. The dynamic and inclusive culture we embrace helps positively impact our communities, clients, and employees. Here you will collaborate with multi-national teams, contribute to numerous cutting-edge projects, deliver the most creative solutions, and have an opportunity to learn. Our people are at the heart of our success, and we are proud to provide talents with a solid ground to develop and grow.