Product Cybersecurity Specialist

Hexagon is a global leader in digital reality solutions, combining sensor, software, and autonomous technologies. We are putting data to work to boost efficiency, productivity, quality, and safety across industrial, manufacturing, infrastructure, public sector, and mobility applications.

Our technologies are shaping the production and people-related ecosystems to become increasingly connected and autonomous - ensuring a scalable, sustainable future.

Hexagon’s Mining division solves surface and underground mine challenges with proven technologies for planning, operations, and safety.

Hexagon (Nasdaq Stockholm: HEXA

B) has approximately 24,000 employees in 50 countries and net sales of approximately 5.5bn USD. Learn more at  and follow us @HexagonAB.

The Product Cybersecurity Specialist helps define the internal cybersecurity processes, performs product cybersecurity analysis, and works with cross functional teams to ensure that Hexagon Mining products and services meet compliance requirements as set by ISO 27001 and the Cyber Resilience Act (CRA). The role supports product cybersecurity compliance across the Mining Division.

Working within the governance framework and processes, the Specialist conducts product cybersecurity audits and assessments, collaborates with Product Development teams in the planning and development of cybersecurity plans for product development, reviews and approves work products/services from a product cybersecurity perspective, prepares audit reports, contributes to Engineering and Support & Services process development, and delivers internal training. The role provides technical guidance and leadership to Service & Support, Product, and Engineering teams and works cooperatively across Product Management, Engineering, Quality, Support & Service, Legal, and Information Security.

Performs service and product cybersecurity analysis and activities as per internal processes to ensure our products meet all compliance requirements.

Specific Accountabilities

1. Audits and Assessments

• Supports third party audits for product cybersecurity.
• May conduct product cybersecurity internal audits and assessments.
• Reviews and approves Work Products from a product cybersecurity perspective.

2. Compliance Evidence & Documentation

• Develops cybersecurity plans for Product Management and Service & Support teams.
• Applies and maintains product cybersecurity processes within a quality management system.
• Establishes and maintains compliance documentation required for regulatory audits.
• Supports technical file creation and evidence management.
• Coordinates cybersecurity compliance reviews and readiness activities.
• Develops product cybersecurity metrics, dashboards, and reporting.

3. Reporting

• Prepares product cybersecurity audit reports.
• Compiles and evaluates data to determine conformance to appropriate cybersecurity assurance levels.

4. Engineering Process Development

• Contributes to engineering process development.
• Supports and conducts product cybersecurity internal assessments.

5. Regulatory Compliance Support (ISO 27001 & EU CRA)

• Applies ISO 27001 and EU Cyber Resilience Act requirements to assigned Mining products, software, cloud services, and connected systems.
• Conducts product-level ISO 27001 and CRA applicability and gap assessments and documents the results.
• Supports vulnerability intake, assessment, prioritization, and remediation tracking.
• Compiles compliance evidence and supports technical file creation and evidence management for regulatory audits.
• Contributes to the Mining Division’s input to the ISO 27001 and Hexagon CRA initiative and cross-functional working groups.

6. Vulnerability Management & Incident Response

• Establishes product vulnerability management processes aligned with CRA requirements.
• Coordinates vulnerability intake, assessment, prioritization, and remediation activities.
• Leads exploitation impact assessments and cross-functional response efforts.
• Coordinates reporting of exploited vulnerabilities and severe incidents to applicable authorities where required.
• Defines customer communication, disclosure, and notification processes.

7. Training

• May conduct product cybersecurity training internally as required.

8. Cross-Functionality Leadership

• Serves as the Mining Division lead and subject matter expert for cybersecurity compliance.
• Provides technical guidance and leadership to others.
• Facilitates innovation through collaboration.
• May lead and facilitate technical…