We are seeking a CRA Portfolio Manager to drive end-to-end Cyber Resilience Act (CRA) readiness across an assigned portfolio of products. The role coordinates Product, Engineering, Cybersecurity, Quality, Compliance, and other stakeholders, while managing external consultants, testing laboratories, and conformity assessment bodies as required.
Key Responsibilities
Own CRA readiness for an assigned portfolio, including roadmap, milestones, risks, dependencies, and reporting.
Drive CRA assessments covering product classification, risk assessment, requirements, applicable standards, conformity assessment, and technical documentation.
Coordinate testing and evidence with product teams and internal/external laboratories.
Manage external engagements with consultants, testing laboratories, Notified Bodies, and other assessment organizations.
Drive gap remediation and closure of findings from risk assessments, testing, audits, and conformity assessments.
Coordinate cross-functional teams across Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other functions.
Ensure assessment readiness and support execution through completion of the applicable conformity assessment process.
Maintain portfolio visibility through status reporting, risks, issues, decisions, and executive escalations.
Improve CRA processes and tools, including the use of automation and AI to scale CRA execution across the product portfolio.
Required Qualifications
5+ years of experience in program/project management, product compliance, cybersecurity, product development, quality, or a related field.
Experience managing complex, cross-functional programs.
Strong understanding of cybersecurity and product development.
Strong stakeholder, planning, communication, and execution skills.
Experience working with external consultants, laboratories, auditors, certification bodies, or similar organizations.
Preferred Qualifications
Experience with the EU Cyber Resilience Act (CRA) or similar cybersecurity regulations.
Experience with cybersecurity standards and risk assessment.
Experience with conformity assessment, certification, product security testing, or technical documentation.
Experience working with European regulatory or assessment organizations.
Experience applying automation or AI to compliance or program management.
Key Competencies
Strong program ownership and execution
Cybersecurity and technical understanding
Regulatory and compliance mindset
Cross-functional leadership without direct authority
Strong stakeholder and external-partner management
Excellent communication and problem-solving skills
The Canada base salary range for this full-time position is expected to be between $108,000- $133,000 annually. Wage ranges are based on various factors including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate’s subject knowledge, skill level, qualifications, and experience.
Fortinet strives to provide you and your family with a comprehensive benefits package. Benefits eligibility starts on your first day of hire and comprises of 100% company paid medical, dental, and vision coverage, including a Health Spending Account and a Personal Spending Account that gives you flexibility to spend where you need it the most. Our Employee & Family Assistance Plan (EFAP) offers you and your family access to various services like counseling, legal advice, mental health resources etc. We also provide critical illness, disability, and life insurance, as well as a Group Registered Retirement Savings Plan (RRSP) with a company match to help you save faster for retirement. We offer competitive Paid Time Off and flexible leave policies, including paid health days, to help you take care of yourself and your family members.
All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.
