Senior Trust Assurance Analyst

Webhosting; United States; On-site; USD 130,000 - 180,000; Full time

Job summary

DigiCert is seeking a Senior Trust Assurance Specialist to join the Trust Office. The role requires 5+ years in compliance, risk management, and audits, with strong knowledge of ISO 27001, ETSI, and other cybersecurity standards.

You will report to the Head of Compliance and work with Security, IT, Legal, and Operations to maintain regulatory alignment. You will lead audits, develop policies, and liaise with regulatory bodies, auditors, and internal teams to strengthen DigiCert's security

Qualifications

• Bachelor’s degree in law, compliance, computer science, or related field.
• 5+ years in compliance, risk management, or internal audit in cybersecurity, PKI, or cloud.
• Strong knowledge of PKI, digital certificates, and cryptographic security principles.
• Experience with standards such as WebTrust for CAs, SOC 2, ISO 27001, FIPS 140-2/3, and NIST frameworks (800-53 r5, 800-63).
• Certifications such as CISSP, CISM, CISA or CRISC are highly desirable.
• Excellent analytical, organizational and communication skills.
• Bi-lingual or business proficiency in Swiss German or German.

Responsibilities

• Regulatory Compliance: Ensure compliance with WebTrust for CAs, ISO 27001, NIST 800-53 r5, NIST 800-63, FISMA, and other regulatory and industry frameworks.
• Audit and Assessment Management: Prepare for and lead internal and external audits, including SOC 2, WebTrust, and other compliance reviews.
• Policy Development: Provide input and review for relevant DigiCert internal policies and procedures. Ensure appropriate controls are designed and implemented throughout the environment to comply with security policies and procedures.
• Stakeholder Collaboration: Work closely with Security, IT, Legal, and Operations teams to ensure compliance objectives are met.
• Stay informed of emerging regulatory trends and changes, advising senior management on potential impacts and necessary adjustments to the compliance program.
• Serve as a liaison with relevant regulatory bodies, agencies, and external auditors, managing communications and coordinating inspections or investigations.
• Collaborate with Legal, Finance, HR and other departments to ensure cohesive compliance strategies and responses to regulatory issues.
• Help foster a culture of compliance and security throughout the organization.
• Any other similar related activities as assigned.

Skills

Compliance management

Regulatory knowledge

Audit leadership

PKI knowledge

ISO 27001

NIST knowledge

SOC 2

WebTrust for CAs

Analytical skills

Communication skills

Education

Bachelor's degree

Job description

Not specified Full-time Senior Operations

Job Description

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

Job summary

We are seeking a Senior Trust Assurance Specialist to join the Trust Office team at DigiCert. The successful candidate will have at least 5 years of experience in compliance, risk management, and leading internal and external audits, with a strong background in ISO 27001, ETSI, and other relevant cybersecurity standards. This role requires an individual with a strong knowledge of regulatory frameworks, exceptional analytical and organizational skills, and the ability to effectively communicate and collaborate with internal and external stakeholders. The role will report to DigiCert’s Head of Compliance and will be part of the Trust Office team.

What you will do

• Regulatory Compliance: Ensure compliance with WebTrust for CAs, ISO 27001, NIST 800-53 r5, NIST 800-63, FISMA, and other regulatory and industry frameworks.
• Audit and Assessment Management: Prepare for and lead internal and external audits, including SOC 2, WebTrust, and other compliance reviews.
• Policy Development: Provide input and review for relevant DigiCert internal policies and procedures. Ensure appropriate controls are designed and implemented throughout the environment to comply with security policies and procedures.
• Stakeholder Collaboration: Work closely with Security, IT, Legal, and Operations teams to ensure compliance objectives are met.
• Stay informed of emerging regulatory trends and changes, advising senior management on potential impacts and necessary adjustments to the compliance program.
• Serve as a liaison with relevant regulatory bodies, agencies, and external auditors, managing communications and coordinating inspections or investigations.
• Collaborate with Legal, Finance, HR and other departments to ensure cohesive compliance strategies and responses to regulatory issues.
• Help foster a culture of compliance and security throughout the organization.
• Any other similar related activities as assigned.

What you will have

• Minimum bachelor’s degree in law, compliance, computer science or related field.
• 5+ years of experience in compliance, risk management, or internal audit, preferably in a cybersecurity, PKI, or cloud environment.
• Strong knowledge of PKI, digital certificates, and cryptographic security principles.
• Experience with standards such as WebTrust for CAs, SOC 2, ISO 27001, FIPS 140-2/3, and NIST frameworks (800-53 r5, 800-63).
• Experience engaging with regulatory bodies, auditors, and external auditors.
• Experience writing and evaluating control design.
• Certifications such as CISSP, CISM, CISA or CRISC are highly desirable.
• Excellent analytical, organizational and communication skills.
• Experience with compliance and risk management software and the ability to leverage technology for efficient compliance monitoring and reporting.
• Native, bi-lingual or business proficiency in Swiss German or German.