Product Cybersecurity Regulatory Analyst

Andersen is seeking a Product Cybersecurity Regulatory Analyst to join a project focused on monitoring US cybersecurity and data privacy regulations. You will play a key role in assessing compliance risks for hardware, embedded software, and cloud services, ensuring our client remains aligned with evolving federal and state requirements.

Key responsibilities

• Monitor US federal regulatory sources, including FCC equipment authorization, Cyber Trust Mark, NIST/OMB IoT guidance, and NHTSA vehicle cybersecurity.
• Assess the applicability of new and amended regulations to diverse product categories, distinguishing between consumer and B2B/industrial requirements.
• Prepare and contribute detailed regulatory updates, findings, and actionable recommendations to consolidated quarterly reports.
• Track relevant state-level connected-device, AI, and privacy laws to ensure comprehensive compliance coverage.

Requirements

• 3+ years of experience tracking US federal rulemaking and multi-state legislation in product or technology regulation.
• Working knowledge of FCC equipment authorization, the U.S. Cyber Trust Mark program, and state-level connected-device or AI laws.
• Familiarity with US state privacy laws as they apply to device data such as geolocation, video, and audio.
• Ability to judge consumer versus B2B applicability and flag uncertainty effectively.
• Upper-Intermediate level of English or higher.

What we offer

• Opportunities for professional growth within a large, experienced team of over 200 analysts.
• Access to an extensive internal knowledge base with courses on Agile, product ownership, and technical domains.
• Compensation programs for international professional certifications.
• Mentorship opportunities and a collaborative environment welcoming specialists from around the world.