Shape the Future of AIJoin one of the UK's fastest-growing companies and become a Professional Development Expert in Artificial Intelligence.

View Roles

Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

BSI
Hertfordshire
22 hours ago
Create job alert

We exist to create positive change for people and the planet. Join us and make a difference too!

Job Title: Subject Matter Expert – Product Cybersecurity (IoT/Connected Devices)

Location: Hemel Hempstead, Hertfordshire
Job Type: Full-time, Permanent (36 hours/week)

Overview

Are you a cybersecurity expert passionate about securing connected products in a rapidly evolving digital landscape?

We’re looking for a Subject Matter Expert (SME) – Product Cybersecurity to lead compliance testing and evaluation of connected consumer, industrial, and medical devices. This is a pivotal technical leadership role, combining hands-on testing, standards interpretation, and strategic guidance to support clients and influence the global security of IoT technologies.

You’ll be at the forefront of emerging cybersecurity regulations and connected product risks, helping clients bring secure products to market and contributing to BSI’s growing reputation as a global authority in product cybersecurity assurance.

What You'll Be Doing

Act as BSI’s technical authority for product cybersecurity compliance. Lead and support cybersecurity testing of IoT products across consumer, industrial, and healthcare sectors. Provide expert interpretation of standards including ETSI EN 303 645, ETSI TS 103 701, RED EN 18031, IEC 62443, UL 2900, and OWASP. Develop and improve test methods, tools, and automated reporting processes for the IoT lab. Guide internal teams and clients through security evaluations, results interpretation, and resolution of compliance issues. Research and evaluate new test equipment and methodologies for advanced threat simulation and analysis. Maintain CREST CPSA or equivalent technical certification. Ensure timely testing and reporting aligned with operational KPIs and accreditation requirements.

Key Skills & Experience

Required:

5+ years of hands-on hardware cybersecurity testing (IoT/connected devices). Expertise in global IoT cybersecurity standards and compliance practices. Strong understanding of microcontrollers (e.g. STM32, ESP32), RTOS, and wireless protocols (Zigbee, Bluetooth, Wi-Fi, Cellular, LoRa WAN). Skilled in interfaces like UART, JTAG, SPI, I2C for debugging. Proficiency with tools such as Nmap, Burp Suite, Wireshark, Nessus. Strong programming foundation (Python, C/C++, Java, etc.). Bachelor's degree in Cybersecurity, Computer/Electrical/Electronic Engineering, Telecommunications or IT.

Preferred:

Previous experience as a Product Cybersecurity SME within the TIC (Testing, Inspection, Certification) industry. Familiarity with custom-built firmware/hardware and IoT architecture principles. CREST CPSA or equivalent qualification (or willingness to obtain).

Why Join Us?

At BSI, you’ll have the opportunity to:

Influence cybersecurity practices across global industries. Work with cutting-edge connected technologies and security testing methods. Be part of an internationally recognised certification body trusted by top brands. Contribute to the development of new compliance standards and thought leadership in the IoT space.

BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training, and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Income Protection & Life Assurance.

Make a real impact in securing the connected world.
Apply now or reach out to our team to learn more.

D&I Policy

BSI is committed to ensuring the diversity of our workforce reflects that of our clients and the communities in which we operate. Our goal is to create a sense of belonging for all employees by providing opportunities to develop, grow, and engage with our global organization all while having fun doing great work. BSI is a community where everyone can thrive.

If you require any reasonable accommodation to be made on account of a disability or impairment throughout our recruiting process, please inform your Talent Acquisition Partner.

#LI-GC1

About Us

BSI is a business improvement and standards company and for over a century BSI has been recognized for having a positive impact on organizations and society, building trust and enhancing lives.
 
Today BSI partners with more than 77,500 clients in 195 countries and engages with a 15,000 strong global community of experts, industry and consumer groups, organizations and governments.
Utilizing its extensive expertise in key industry sectors - including automotive, aerospace, built environment, food and retail, and healthcare - BSI delivers on its purpose by helping its clients fulfil theirs.
Living by our core values of Client-Centricity, Agility, and Collaboration, BSI provides organizations with the confidence to grow by partnering with them to tackle society’s critical issues – from climate change to building trust in digital transformation and everything in between - to accelerate progress towards a better society and a sustainable world.

BSI is an Equal Opportunity Employer dedicated to fostering a diverse and inclusive workplace.

Related Jobs

View all jobs

Senior Product Security Architect

Product Security - Cyber Security Architect - Chase UK

Cybersecurity Solutions Engineer.

Senior Lead Cybersecurity Architect

Presales Consultant – Security

Business Development Manager Public Sector IT Transformation

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Why Now Is the Perfect Time to Launch Your Career in Cyber Security: The UK's Digital Defence Revolution

The United Kingdom faces an unprecedented cyber security challenge that presents an extraordinary career opportunity. With cyber attacks increasing by 300% year-on-year and the average cost of a data breach reaching £4.24 million, Britain urgently needs skilled cyber security professionals to defend its digital infrastructure, protect citizens' data, and maintain national security in an increasingly connected world. If you've been considering a career change or seeking to future-proof your professional trajectory, cyber security represents one of the most secure, well-compensated, and socially impactful career choices available. The convergence of escalating threats, skills shortage, government investment, and regulatory requirements has created a perfect storm of opportunity that shows no signs of abating.

Automate Your Cyber Security Jobs Search: Using ChatGPT, RSS & Alerts to Save Hours Each Week

Cyber roles drop across consultancies, MSSPs, hyperscalers, banks, gov & start-ups every day—often buried in ATS portals or duplicated across boards. The fix is simple: put discovery on autopilot with keyword-rich alerts, RSS feeds & a reusable ChatGPT workflow that triages listings, ranks fit, & tailors your CV in minutes. This copy-paste playbook is built for www.cybersecurityjobs.tech readers. It’s UK-centric, practical, & designed to save you hours each week. What You’ll Have Working In 30 Minutes A role & keyword map spanning SecOps/Detection, DFIR, AppSec, Cloud Security, GRC, Red Team, Threat Intel, IAM/PAM, OT/ICS & Vulnerability Management. Shareable Boolean search strings for Google & job boards to cut noise fast. Always-on alerts & RSS feeds delivering fresh roles to your inbox/reader. A ChatGPT “Cyber Job Scout” prompt that deduplicates, scores fit & outputs tailored actions. A simple pipeline tracker so deadlines & follow-ups never slip.

10 Cyber Security Recruitment Agencies in the UK You Should Know (2025 Job‑Seeker Guide)

UK cyber security hiring remains resilient in 2025, driven by nation-state threats, cloud security investments, and NCSC regulatory pressures. Lightcast reports +42 % YoY growth in UK roles mentioning “SOC”, “cyber risk”, “offensive security” or “GRC”. Yet despite 30,000 active cyber professionals, monthly live vacancies remain in the 2,500–2,900 range. The result: strong demand across public and private sector. We reviewed 50 + consultancies and included only those that: Are registered in the UK (Companies House) Operate a dedicated Cyber Security / InfoSec / Risk & Compliance desk Posted at least 5 UK cyber security roles between March and June 2025 This guide includes 2025 salary ranges, key skills, interview prep tips, and a verified recruiter directory.