Security Compliance Expert (CRA Compliance)

We are seeking a Security Compliance Expert to perform a high-level CRA (Cyber Resilience Act) compliance gap analysis against the OS Vertical requirements for enterprise-grade Linux products. In this role, you will identify compliance gaps, assess the feasibility of compliance, and provide input for future technical investigations, working with enterprise-grade Linux OS on the x86/x86_64 platform.

Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.

Responsibilities

• Produce a gap analysis spreadsheet/table with a requirement-by-requirement assessment
• Identify compliance risks and high-level problem areas without diving into implementation details
• Perform an initial feasibility assessment for non-compliant requirements
• Provide recommendations on areas requiring deeper technical investigation
• Review the current OS Vertical/ETSI documentation
• Map regulatory requirements to the selected product (initially REL 10 / Liberty Linux 10.x)
• Classify requirements as: Compliant, Potentially compliant with reasonable effort, or Not compliant/significant concern
• Participate in knowledge-transfer sessions with stakeholders
• Refine the analysis when newer versions of the OS Vertical become available, as the specification is still evolving and the exercise will need to be revisited

Requirements

• 3+ years of relevant experience in Security Compliance Assurance
• Understanding of product security and cybersecurity concepts in general
• Background in Security/Compliance Architecture
• Knowledge of product architecture and the lifecycle of the analyzed Linux distribution/product, along with product-level architecture understanding
• Experience working with standards, controls, or regulatory frameworks
• Capability to read, analyze, and interpret regulatory requirements from the OS Vertical document and map them to product capabilities
• Proficiency in performing compliance assessments focused on gap identification rather than solution engineering or detailed implementation design
• English level B1+ for effective communication

Nice to have

• Familiarity with Linux platform engineering
• Knowledge of enterprise-grade Linux OS support on x86/x86_64 platforms

We offer

• We connect like-minded people
  • Delivering innovative solutions to industry leaders, making a global impact
  • Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
  • Opportunity to work abroad for up to two months per year
  • Relocation opportunities within our offices in 55+ countries
  • Corporate and social events
• We invest in your growth
  • Leadership development, career advising, soft skills and well-being programs
  • Certifications, including GCP, Azure and AWS
  • Unlimited access to EPAM's internal learning database
  • Free English classes with certified teachers
• We cover it all
  • Participation in the Employee Stock Purchase Plan
  • Monetary bonuses for engaging in the referral program
  • Comprehensive medical & family care package
  • Five trust days per year (sick leave without a medical certificate)
  • Benefits package (sports activities, a variety of stores and services)

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.