Arm
Principal Product Security Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job ID 2026-19479
Date posted: 08/10/2026
Location: Cambridge, United Kingdom
Category: Product Security
Job Overview
We’re looking for a Product Security Regulatory Compliance Engineer to join our Product Security team, helping Arm translate emerging cybersecurity regulations and standards into actionable, scalable engineering solutions.
With a particular focus on the EU Cyber Resilience Act (CRA), alongside other global regulatory obligations, the role will help integrate regulatory requirements across Arm’s products, engineering practices, and Secure Development Lifecycle (SDL).
Working across Engineering, Product Management, Security, Legal, and Compliance, the role will help Arm meet evolving product security requirements while supporting innovation and trust. It will also represent Arm in international standards and regulatory working groups, contributing to the development of industry approaches to product security!
Responsibilities
This role will help shape Arm’s response to the evolving product security regulatory landscape, providing subject matter expertise and helping teams apply new requirements in practice.
The role includes monitoring, evaluating, and interpreting emerging product security regulations, including the EU Cyber Resilience Act (CRA), NIS2, and U.S. cybersecurity labelling requirements, while providing subject matter expertise on security-related regulatory obligations.
Working across Product Security, Engineering, Architecture, Legal, Compliance, Quality, and Functional Safety, the role will:
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Translate cybersecurity regulations and standards into clear product and engineering requirements.
- Lead regulatory risk assessments and gap analyses, identifying actions needed to meet evolving product security obligations.
- Develop and implement policies, frameworks, and processes that support product alignment with security regulations.
- Embed regulatory requirements and Secure-by-Design practices into Arm’s Secure Development Lifecycle (SDL).
- Partner with engineering and product teams to integrate compliance requirements throughout product development.
- Support incident response planning and regulatory reporting obligations.
- Drive alignment of regulatory, contractual, and certification requirements across relevant teams.
- Develop guidance, training, and mentorship to support the practical application of the CRA and other product security regulations.
- Represent Arm in relevant industry, regulatory, and standardization activities.
What we're looking for
What will help you succeed in this role?
This role requires a strong understanding of product security regulations, standards, and their associated communities, including the EU CRA, ENISA, UK PSTI, BSI, NIS2, and OpenSSF.
We’re looking for experience with Security Development Lifecycles and product security assurance, including requirements management, threat modelling, security testing, and incident response. The ability to interpret legal and regulatory text and translate it into actionable technical and engineering requirements is also important.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The role involves collaborating across multidisciplinary engineering teams and communicating complex regulatory and security topics clearly to different audiences. We also value experience in regulatory advocacy, industry working groups, or standards development.
Nice to have
We’d welcome experience in one or more of the following areas:
- Security of embedded systems, semiconductors, or software supply chains.
- Low-level software or hardware development and architecture.
- Security standards and assurance schemes including ISO 21434, IEC 62443, SESIP, and PSA Certified.
- Semiconductor technologies, including SoCs, processor IP, or Compute Subsystems.
- Cybersecurity standardization or regulatory engagement.
Additional Information
Please note that a relocation package (including visa sponsorship support) is available for this role, for candidates who require it.
We’re committed to providing an inclusive recruitment experience. If you need an adjustment or accommodation during the recruitment process, please let us know.
About
At Arm, we believe progress happens when people are empowered to think bigger and push beyond what seems possible. Our 10x mindset is about curiosity, ambition, and creating impact that will be used by millions. We learn fast, prioritize collaboration, and turn bold ideas into real technology. We look for people who are inspired by this way of working and want to grow in an environment where bold ideas are welcomed.
Salary Range
£126,200 - £170,800 per year
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London