Cyber Resilience Act Program Manager

We are looking for a Cyber Resilience Act (CRA) Program Manager, reporting to our Director of Innovation Excellence.

Job Summary

The CRA Program Manager leads the enterprise program to achieve and sustain compliance with the EU Cyber Resilience Act for all JBT Marel products with digital components across divisions. Positioned within Global Innovation Excellence, the role protects EU market access, enables compliant innovation and embeds regulatory cybersecurity requirements into innovation governance, product development and lifecycle management.

Scope and Authority

The role covers the enterprise CRA readiness program across divisions and operating units, including products, software, automation, connected components and relevant lifecycle processes in scope of the regulation.

The CRA Program Manager defines the roadmap, governance, milestones, reporting structure and implementation expectations in collaboration with Innovation, Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.

The role is authorized to set readiness reporting expectations, drive adoption of required processes and standards, and escalate non-compliance risks that may affect compliance, liability or EU market access. Final compliance accountability remains with executive leadership and divisional/product owners.

Primary Accountability

Lead enterprise CRA readiness and embed secure-by-design requirements into innovation, stage-gate, product development, documentation and lifecycle processes.

Ensure all in-scope products are assessed, remediation is governed, evidence is audit-ready and product cybersecurity practices are aligned across divisions.

Provide clear governance, risk visibility and executive communication so leadership can make timely decisions on priorities, resources and market-access risks.

Main tasks

• Define and execute the enterprise CRA readiness roadmap across all in-scope products and divisions.
• Establish program governance, milestones, reporting cadence, decision forums and escalation routes.
• Embed secure-by-design and security lifecycle requirements into innovation, stage-gate and product development processes.
• Coordinate product cybersecurity risk assessments, remediation planning and evidence gathering for in-scope products.
• Align CRA requirements with design standards, technical documentation, conformity evidence and lifecycle obligations.
• Drive consistent vulnerability management, incident handling and post-market security monitoring processes.
• Coordinate Engineering, Information Security, IT, Legal, Compliance, Procurement, Supply Chain, Service and Commercial teams.
• Support divisions with practical process changes, tools, templates, ownership models and training.
• Track readiness status, risks, dependencies, resources and remediation progress across divisions and portfolios.
• Prepare structured updates for the Innovation Council and upper management to support priorities and resourcing decisions.
• Maintain audit-ready evidence and escalate material risks that could affect compliance, liability or EU market access.

Skills and Abilities

• Strong program leadership in complex, cross-functional and multi-divisional environments.
• Ability to drive enterprise change and process adoption without relying only on direct authority.
• Good understanding of product development, innovation governance and lifecycle management.
• Ability to translate regulatory cybersecurity requirements into practical processes and deliverables.
• Strong stakeholder management, facilitation and executive communication skills.
• Structured, pragmatic and execution focused, with clear judgment on risk escalation and decision needs.

Education, Knowledge and Experience

• Relevant university degree, preferably within engineering, cybersecurity, computer science, industrial engineering, innovation management or a related field.
• Experience in program management, product development, cybersecurity, regulated compliance or product lifecycle governance.
• Knowledge of EU Cyber Resilience Act requirements, secure-by-design principles, product cybersecurity or related regulatory frameworks is an advantage.
• Experience from equipment manufacturing, industrial automation, software-enabled products or complex B2B machinery is an advantage.
• Experience coordinating across Engineering, IT, Information Security, Legal, Compliance, Procurement, Service and Commercial functions.
• Excellent English skills, both written and verbal, and comfort working in a multi-cultural, multi-discipline organization.

About JBT Marel

• We are committed to our employees and provide development and opportunities to allow you to be the best version of yourself at work, at home, and in your community.
• We foster a genuine inclusive team culture enjoying collaborative working across our global teams to deliver world-class projects.
• We encourage development, ensuring new experiences and challenges at JBT Marel to feed your growth.