Cyber Resilience Portfolio Manager

Location: Sunnyvale, CA, United States; Hybrid

We are seeking a CRA Portfolio Manager to drive end-to-end Cyber Resilience Act (CRA) readiness across an assigned portfolio of products. The role coordinates Product, Engineering, Cybersecurity, Quality, Compliance, and other stakeholders, while managing external consultants, testing laboratories, and conformity assessment bodies as required.

Key Responsibilities

• Own CRA readiness for an assigned portfolio, including roadmap, milestones, risks, dependencies, and reporting.

• Drive CRA assessments covering product classification, risk assessment, requirements, applicable standards, conformity assessment, and technical documentation.

• Coordinate testing and evidence with product teams and internal/external laboratories.

• Manage external engagements with consultants, testing laboratories, Notified Bodies, and other assessment organizations.

• Drive gap remediation and closure of findings from risk assessments, testing, audits, and conformity assessments.

• Coordinate cross-functional teams across Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other functions.

• Ensure assessment readiness and support execution through completion of the applicable conformity assessment process.

• Maintain portfolio visibility through status reporting, risks, issues, decisions, and executive escalations.

• Improve CRA processes and tools, including the use of automation and AI to scale CRA execution across the product portfolio.

Required Qualifications

• 5+ years of experience in program/project management, product compliance, cybersecurity, product development, quality, or a related field.

• Experience managing complex, cross-functional programs.

• Strong understanding of cybersecurity and product development.

• Strong stakeholder, planning, communication, and execution skills.

• Experience working with external consultants, laboratories, auditors, certification bodies, or similar organizations.

Preferred Qualifications

• Experience with the EU Cyber Resilience Act (CRA) or similar cybersecurity regulations.

• Experience with cybersecurity standards and risk assessment.

• Experience with conformity assessment, certification, product security testing, or technical documentation.

• Experience working with European regulatory or assessment organizations.

• Experience applying automation or AI to compliance or program management.

Key Competencies

• Strong program ownership and execution

• Cybersecurity and technical understanding

• Regulatory and compliance mindset

• Cross-functional leadership without direct authority

• Strong stakeholder and external-partner management

• Excellent communication and problem-solving skills

Must be authorized to work in the U.S. without sponsorship.

The US base salary range for this full-time position is $136,000-$166,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program.

Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidates subject knowledge, skill level, qualifications, experience, and geographic location.

All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.

Why Join Us:

We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being.

Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe.

About Us