Cyber Resilience Portfolio Manager

Job-:
Project Management(R&D)

Location:

Sunnyvale, CA, United States Workplace:
Hybrid

Schedule:

Full time Posted:
We are seeking a CRA Portfolio Manager to drive end-to-end Cyber Resilience Act (CRA) readiness across an assigned portfolio of products. The role coordinates Product, Engineering, Cybersecurity, Quality, Compliance, and other stakeholders, while managing external consultants, testing laboratories, and conformity assessment bodies as required.

Key Responsibilities Own CRA readiness for an assigned portfolio, including roadmap, milestones, risks, dependencies, and reporting.

Drive CRA assessments covering product classification, risk assessment, requirements, applicable standards, conformity assessment, and technical documentation.

Coordinate testing and evidence with product teams and internal/external laboratories.

Manage external engagements with consultants, testing laboratories, Notified Bodies, and other assessment organizations.

Drive gap remediation and closure of findings from risk assessments, testing, audits, and conformity assessments.

Coordinate cross-functional teams across Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other functions.

Ensure assessment readiness and support execution through completion of the applicable conformity assessment process.

Maintain portfolio visibility through status reporting, risks, issues, decisions, and executive escalations.

Improve CRA processes and tools, including the use of automation and AI to scale CRA execution across the product portfolio.

Required Qualifications 5+ years of experience in program/project management, product compliance, cybersecurity, product development, quality, or a related field.

Experience managing complex, cross-functional programs.

Strong understanding of cybersecurity and product development.

Strong stakeholder, planning, communication, and execution skills.

Experience working with external consultants, laboratories, auditors, certification bodies, or similar organizations.

Preferred Qualifications

Experience with the EU Cyber Resilience Act (CRA) or similar cybersecurity regulations.

Experience with cybersecurity standards and risk assessment.

Experience with conformity assessment, certification, product security testing, or technical documentation.

Experience working with European regulatory or assessment organizations.

Experience applying automation or AI to compliance or program management.

Key Competencies Strong program ownership and execution

Cybersecurity and technical understanding

Regulatory and compliance mindset

Cross-functional leadership without direct authority

Strong stakeholder and external-partner management

Excellent communication and problem-solving skills

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full-time position is $136,000-$166,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program.

Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.

Why Join Us:

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being.

Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.

About the company

Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network - today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud or mobile environments.

Fortinet ranks number one in the most…