Lacework logo

Cyber Resilience Portfolio Manager

Lacework

Sunnyvale, CAFull-time$136–166K/yrPosted 2w agoStill listed today

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$136–166K/yr
Location
Sunnyvale, CA
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

The CRA Portfolio Manager drives end-to-end Cyber Resilience Act readiness across an assigned product portfolio. The role coordinates internal product and engineering teams and external consultants, laboratories, and assessment bodies; manages assessments, testing, evidence, and remediation; and maintains portfolio reporting and executive escalations. It also improves CRA processes and tools, including automation and AI. The posting requires five or more years of relevant experience and U.S. work authorization without sponsorship.

Skills & qualifications

RequiredNice to have

Skills

Program ManagementCyber SecurityQuality AssuranceStakeholder ManagementRisk AnalysisTechnical DocumentationTeam LeadershipCross-Functional Program ManagementCybersecurityProduct DevelopmentPlanningCommunicationExecutionExternal Partner ManagementCyber Resilience ActCybersecurity RegulationsCybersecurity StandardsRisk AssessmentConformity AssessmentCertificationProduct Security TestingEuropean Regulatory OrganizationsAutomationArtificial IntelligenceProblem Solving

Qualifications

5+ Years Relevant ExperienceU.S. Work Authorization Without Sponsorship

Benefits

Medical Insurance
Dental Insurance
Vision Insurance
401(k) Match
Paid Time Off
Parental Leave

Full job description

We are seeking a CRA Portfolio Manager to drive end-to-end Cyber Resilience Act (CRA) readiness across an assigned portfolio of products. The role coordinates Product, Engineering, Cybersecurity, Quality, Compliance, and other stakeholders, while managing external consultants, testing laboratories, and conformity assessment bodies as required.

Key Responsibilities

  • Own CRA readiness for an assigned portfolio, including roadmap, milestones, risks, dependencies, and reporting.

  • Drive CRA assessments covering product classification, risk assessment, requirements, applicable standards, conformity assessment, and technical documentation.

  • Coordinate testing and evidence with product teams and internal/external laboratories.

  • Manage external engagements with consultants, testing laboratories, Notified Bodies, and other assessment organizations.

  • Drive gap remediation and closure of findings from risk assessments, testing, audits, and conformity assessments.

  • Coordinate cross-functional teams across Product, Engineering, Cybersecurity, Quality, Compliance, Legal, and other functions.

  • Ensure assessment readiness and support execution through completion of the applicable conformity assessment process.

  • Maintain portfolio visibility through status reporting, risks, issues, decisions, and executive escalations.

  • Improve CRA processes and tools, including the use of automation and AI to scale CRA execution across the product portfolio.

Required Qualifications

  • 5+ years of experience in program/project management, product compliance, cybersecurity, product development, quality, or a related field.

  • Experience managing complex, cross-functional programs.

  • Strong understanding of cybersecurity and product development.

  • Strong stakeholder, planning, communication, and execution skills.

  • Experience working with external consultants, laboratories, auditors, certification bodies, or similar organizations.

Preferred Qualifications

  • Experience with the EU Cyber Resilience Act (CRA) or similar cybersecurity regulations.

  • Experience with cybersecurity standards and risk assessment.

  • Experience with conformity assessment, certification, product security testing, or technical documentation.

  • Experience working with European regulatory or assessment organizations.

  • Experience applying automation or AI to compliance or program management.

Key Competencies

  • Strong program ownership and execution

  • Cybersecurity and technical understanding

  • Regulatory and compliance mindset

  • Cross-functional leadership without direct authority

  • Strong stakeholder and external-partner management

  • Excellent communication and problem-solving skills

Must be authorized to work in the U.S. without sponsorship. The US base salary range for this full-time position is $136,000-$166,000. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time, as well as a comprehensive leave program. Wage ranges are based on various factors, including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate's subject knowledge, skill level, qualifications, experience, and geographic location. All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at the time of hire and annually at the Company’s discretion.

Why Join Us: We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 890,000+ customers around the globe. Fortinet (NASDAQ: FTNT) secures the largest enterprise, service provider, and government organizations around the world. Fortinet empowers its customers with intelligent, seamless protection across the expanding attack surface and the power to take on ever-increasing performance requirements of the borderless network - today and into the future. Only the Fortinet Security Fabric architecture can deliver security without compromise to address the most critical security challenges, whether in networked, application, cloud or mobile environments. Fortinet ranks number one in the most security appliances shipped worldwide and more than 500,000 customers trust Fortinet to protect their businesses.

We are committed to providing reasonable accommodations for all qualified individuals with disabilities. If you require assistance or accommodation due to a disability, please contact us at [email protected].

Fortinet is an equal opportunity employer. We value diversity in our company, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, military/veteran status or any other applicable legally protected characteristics in the location in which the candidate is applying.

How this job compares

Set against the 1,257 open Portfolio Management jobs on Olive Jobs, counted November 3, 2026.

Pay
  • This posting$136–166K/yr
  • California median$149–250K/yr90 salary ranges
  • US median$140–220K/yr923 salary ranges

This range's midpoint, $151K, is 24% below the California median midpoint ($200K) — in the lowest quarter of Portfolio Management salary ranges in California.

Openings
Olive Jobs lists 110 open Portfolio Management jobs in California and 1,257 across the US. 5% of them nationwide are listed as remote or flexible.
Hiring the most in California
Experience
This posting asks for at least 5 years of experience; Portfolio Management postings that state a minimum ask for 7 years at the median (1,078 postings).
Education
611 of the 1,257 open Portfolio Management jobs (49%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 3, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.