Program Lead CRA Compliance

Program Lead CRA Compliance

RTP, NC or San Jose, CA (Remote is fine)

Job Description:

Draft the technical roadmap and execution plan for CRA compliance and adjust it as requirements evolve.

Translate regulatory requirements into concrete technical proposals: what the platform needs to capture or expose for SBOMs, vulnerability handling, audit documentation.

Drive engineering tracking for the CRA program. Assign and track work, surface risks, keep delivery on schedule.

Represent CRA in meetings and stakeholder conversations with legal, compliance, other platform teams, and engineering leadership, so requirements are understood once and built once.

Coordinate with the Product Manager who owns our core platform to sequence CRA work against everything else on that roadmap.

Unblock the engineers implementing the work day to day. You don't manage them, but you keep them moving.

Who You Are:

AI-native in how you work, even outside of code. You default to using AI to track requirements, draft technical proposals and roadmaps, and synthesize stakeholder input, not do it by hand.

Comfortable bringing order to genuine ambiguity, where requirements are still being written and no precedent exists yet.

Experienced translating a regulatory or compliance requirement into a technical plan. Doesn't have to be CRA specifically, but you've done this kind of translation before.

Comfortable being the face of a program: running meetings and managing stakeholders you don't manage, without someone else in the room.

Technically credible that your draft proposals hold up to engineering scrutiny.

Organized enough to own delivery tracking for a multi-team initiative without letting things slip.

Minimum Qualifications:

Bachelor's degree in any field, or demonstrated equivalent experience.

Demonstrated fluency using AI as a default part of how you research, plan, and write.

Experience in a technical program management, technical lead, or similar hybrid role, owning both technical direction and delivery tracking for cross-functional or ambiguous initiatives.

Experience with security, compliance, or regulatory requirements (SBOMs, vulnerability disclosure, secure-by-design, audit documentation). Direct CRA experience is a plus, not required.

Track record working closely with a product manager as a technical or program counterpart, including coordinating with other PMs and stakeholders outside your immediate team.

Strong enough grasp of software architecture to draft technical proposals that engineers and the PM can trust, even without owning final sign-off.