Cyber Resilience Act (CRA) Officer

About the role

kiongroup is looking for a Cyber Resilience Act (CRA) Officer in Antwerp. The role leads and coordinates the organisation's compliance with the EU Cyber Resilience Act and owns the product cybersecurity governance required by the CRA: risk assessments, secure-by-design evidence, vulnerability management, incident reporting to authorities, technical documentation (including SBOMs) and post-market monitoring across product lifecycles.

Key responsibilities

• Design, run and continuously improve the CRA compliance program and roadmap to meet the 2026/2027 timelines, and support the business after December 2027
• Translate regulatory requirements into product-level policies, processes, checklists and controls
• Maintain the vulnerability management and coordinated disclosure process, and ensure timely detection, triage and reporting of security incidents to competent authorities
• Coordinate with or lead PSIRT/CERT/SOC teams and product teams on timely fixes and communications
• Ensure products follow secure-by-design and secure-by-default practices, and document risk assessments, threat models and mitigations
• Manage technical documentation such as security testing reports, SBOMs, update policies and support period statements
• Coordinate internal and external conformity assessments, support audits and oversee supply-chain security and third-party component governance
• Act as the point of contact for national competent authorities and EU bodies, prepare notifications and reports, and keep records
• Deliver CRA training to product, engineering, legal, compliance, support and sales teams, and report status to senior management
• Define KPIs, run periodic assessments, maintain roadmaps and stay up to date with CRA guidance and ENISA updates

What we offer

• A fast-growing tech leader shaping the future of intralogistics, in an international environment
• Flexible working hours and up to 40% remote work
• Compensation package including a company car, meal vouchers and comprehensive insurance
• 36 vacation days