Cyber Resilience Portfolio Manager

Fortinet•Sunnyvale, CA

About The Position

Fortinet is seeking a CRA Portfolio Manager to drive end-to-end Cyber Resilience Act (CRA) readiness across an assigned portfolio of products. The role coordinates Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other stakeholders, and manages external consultants, testing laboratories, and conformity assessment bodies as required. The position owns portfolio readiness, drives assessments and remediation, supports conformity assessment through completion, maintains executive-level visibility, and improves processes and tools—including through automation and AI—to scale CRA execution.

Requirements

At least 5 years of experience in program or project management, product compliance, cybersecurity, product development, quality, or a related field.
Experience managing complex, cross-functional programs.
Strong understanding of cybersecurity and product development.
Strong stakeholder, planning, communication, and execution skills.
Experience working with external consultants, laboratories, auditors, certification bodies, or similar organizations.
Must be authorized to work in the U.S. without sponsorship.

Nice To Haves

Experience with the EU Cyber Resilience Act (CRA) or similar cybersecurity regulations.
Experience with cybersecurity standards and risk assessment.
Experience with conformity assessment, certification, product security testing, or technical documentation.
Experience working with European regulatory or assessment organizations.
Experience applying automation or AI to compliance or program management.

Responsibilities

Own CRA readiness for an assigned portfolio, including the roadmap, milestones, risks, dependencies, and reporting.
Drive CRA assessments covering product classification, risk assessment, requirements, applicable standards, conformity assessment, and technical documentation.
Coordinate testing and evidence with product teams and internal or external laboratories.
Manage external engagements with consultants, testing laboratories, Notified Bodies, and other assessment organizations.
Drive gap remediation and close findings from risk assessments, testing, audits, and conformity assessments.
Coordinate cross-functional teams across Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other functions.
Ensure assessment readiness and support execution through completion of the applicable conformity assessment process.
Maintain portfolio visibility through status reporting, risks, issues, decisions, and executive escalations.
Improve CRA processes and tools, including the use of automation and AI to scale CRA execution across the product portfolio.