Cyber Resilience Act (CRA) Compliance Lead - San Jose, California, United States
$149,100 - $215,925 USD yearly
Originally posted 5 August 2026 by the employer.
Altera is seeking a Cyber Resilience Act (CRA) Compliance Lead to establish and govern the company-wide compliance framework.
About the role
This role involves establishing, governing, and driving the company-wide compliance framework for the European Union Cyber Resilience Act and related product cybersecurity regulatory requirements. The role serves as the enterprise CRA compliance lead and coordinates cross-functional activities within the Quality & Reliability organization.
What you'll do
- Maintain the enterprise CRA compliance framework, governance model, policies, procedures, roles, responsibilities, and decision authorities.
- Establish traceability model between CRA requirements, cybersecurity risks, product requirements, design controls, verification activities, technical documentation, and conformity evidence.
- Coordinate alignment with applicable standards and frameworks, including ISO/IEC 27001, IEC 62443, ISO/SAE 21434, ISO 26262, vulnerability management standards, and emerging CRA harmonized standards.
- Monitor regulatory developments, delegated acts, implementing guidance, harmonized standards, and industry interpretations that may affect company products or compliance obligations.
- Partner with cross functional organization to determine product classification, critical-product applicability, conformity assessment pathways and regulatory obligations.
- Lead development and governance of the CRA conformity-assessment framework, and maintenance of required CRA technical documentation and conformity evidence.
What you'll need
- Bachelor's degree in Engineering, Computer Science, Information Systems, Cybersecurity, Quality, or a related technical field.
- 10+ years of experience in product compliance, product cybersecurity, quality systems, regulatory compliance, engineering governance, or semiconductor product development.
- 2+ years of experience interpreting and applying product cybersecurity regulations, including the EU Cyber Resilience Act (CRA) and other applicable global product security regulatory requirements.
- 8+ years of experience leading enterprise or product compliance programs across multiple cross-functional organizations and global geographic locations.
- 8+ years of experience implementing secure product development lifecycle (Secure SDLC) processes, product cybersecurity risk management, vulnerability management, software component governance (SBOM/open-source governance), and post-market product security compliance.
- 8+ years of experience managing product lifecycle governance processes, including New Product Introduction (NPI), requirements management, configuration management, engineering change management, product release governance, audit readiness, and compliance evidence management.
Nice to have
- Experience with semiconductor hardware, embedded firmware, software development tools, intellectual property, reference designs, or complex product ecosystems.
- Working knowledge of applicable standards and frameworks, such as IEC 62443, ISO/SAE 21434, ISO/IEC 27001, ISO 9001, AS9100, ISO 26262, IEC 61508.
- Experience with Software Bill of Materials, 3rd party and open-source software governance, vulnerability-disclosure programs, product security incident response, or cybersecurity conformity assessment.
- Experience supporting CE marking, EU product regulations, technical-file development, declarations of conformity, or market-surveillance activities.
- Experience within the FPGA, semiconductor, embedded systems, electronics, automotive, aerospace, defense, industrial, or technology industries.
Skills: Cyber Resilience Act, product cybersecurity, ISO/SAE 21434, ISO 26262, secure product development lifecycle
This role has been open 73 days — well above the 61-day median for Automotive/Functional Safety Engineering roles.
Automotive/Functional Safety Engineering · Automotive Safety
|
Open roles in category
127
|
Median days open
61 d
|
Median salary
$233k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Altera | All employers we track in this specialty (127 roles · 27 employers) |
|---|---|---|
| Open roles in this specialty | 4 | 127 |
| Median days open | 83 d | 61 d (+22 d vs this employer) |
| Median salary (USD postings) | — | $233k |
Skills observed across this category: Cyber Resilience Act, product cybersecurity, ISO/SAE 21434, ISO 26262, secure product development lifecycle
Who's hiring in this category
- NXP Semiconductors · 31 open roles · median 32 d
- NVIDIA · 17 open roles · median 54 d
- Infineon Technologies · 13 open roles · median 44 d
- Arm Holdings · 10 open roles · median 86 d
- Qualcomm · 9 open roles · median 192 d
- Renesas Electronics · 8 open roles · median 53 d
How we counted: 127 open Automotive/Functional Safety Engineering (Automotive Safety) roles from 27 employers tracked in the SemiconductorJobs index, counted 18 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.