Senior Trust Assurance Specialist

Jobgether; Oregon; Hybride; USD 130 000 - 160 000; Plein temps

Avantages offerts par ce poste

Medical, dental, and vision coverage

401(k) retirement plan with matching

Generous paid time off

Parental leave and family support

Life and disability insurance

Education assistance and LinkedIn Lear

Résumé du poste

Jobgether in the United States is seeking a Senior Trust Assurance Specialist to lead complex compliance, audit, and assurance initiatives across the organization. You will serve as a key contact for external auditors, guide internal controls, and mentor team members in security and governance practices.

You will work with Security, IT, Legal, HR, and Operations to translate regulatory requirements into practical compliance practices and help mature a global trust and security program.

Qualifications

• Bachelor's degree in Law, Compliance, Information Security, Computer Science, or related discipline.
• At least 6 years in compliance, risk management, audit, or related field.
• Experience leading audit engagements with SOC 2, ISO 27001, WebTrust, and NIST.
• Strong ability to interpret regulations and assure practices across teams.
• Experience working with external auditors and regulatory bodies.
• Excellent analytical, organizational, and communication skills.

Responsabilités

• Lead external and customer audit engagements, including SOC 2 and WebTrust, from planning through follow-up.
• Serve as primary contact for external auditors; coordinate communications and evidence requests.
• Oversee audit evidence and ensure remediation of findings.
• Interpret and apply regulatory frameworks like WebTrust, ISO 27001, NIST, and SOC 2.
• Monitor regulatory developments and align internal policies accordingly.
• Design, test, and improve internal controls for effectiveness and compliance.
• Identify control gaps and provide remediation guidance across teams.
• Support risk assessments and integrate compliance into enterprise risk management.
• Build relationships with senior stakeholders across Security, IT, Legal, HR, and Operations.
• Mentor Analysts and Specialists to strengthen team capabilities.
• Drive improvements in processes, tools, and reporting for a scalable program.

Connaissances

Audit leadership

Regulatory interpretation

Stakeholder management

Analytical thinking

Communication skills

Formation

Bachelor's degree in Law, Compliance, Information Security, Computer Science, or a related discipline

Outils

SOC 2

ISO 27001

NIST

WebTrust

Description du poste

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Trust Assurance Specialist based in the United States. The Senior Trust Assurance Specialist will lead complex compliance, audit, and assurance initiatives, helping maintain strong governance and regulatory alignment across the organization. This senior-level role combines deep technical knowledge of cybersecurity and compliance frameworks with the ability to influence decisions across multiple business functions. You will serve as a key contact for external auditors and customer assurance engagements, while guiding the design and effectiveness of internal controls. Working closely with Security, IT, Legal, HR, and Operations, you will translate regulatory requirements into practical, sustainable compliance practices. The position offers significant autonomy, opportunities to mentor colleagues, and the ability to contribute directly to the maturity and scalability of a global trust and security program.

Accountabilities

• Lead external and customer audit engagements, including SOC 2 and WebTrust assessments, from planning through execution and follow-up.
• Serve as a primary point of contact for external auditors, coordinating communications, evidence requests, walkthroughs, and issue resolution.
• Oversee audit evidence preparation and ensure findings are addressed through timely and effective remediation.
• Interpret and apply relevant regulatory and industry frameworks, including WebTrust for Certificate Authorities, ISO 27001, NIST, and SOC 2.
• Monitor regulatory developments and assess their implications for internal policies, control frameworks, and organizational practices.
• Lead the design, evaluation, testing, and continuous improvement of internal controls to ensure effectiveness and regulatory alignment.
• Identify systemic control gaps, recommend remediation strategies, and provide guidance on complex control matters.
• Contribute to risk assessments and help integrate compliance requirements into broader enterprise risk management activities.
• Build relationships with senior stakeholders across Security, IT, Legal, HR, and Operations, influencing decisions and promoting consistent compliance practices.
• Mentor and support Analysts and Specialists, sharing subject matter expertise and strengthening team capabilities.
• Drive improvements in compliance processes, tools, and reporting to support a more mature and scalable compliance program.

Requirements

• Bachelor's degree in Law, Compliance, Information Security, Computer Science, or a related discipline.
• At least 6 years of professional experience in compliance, risk management, audit, or a related field.
• Demonstrated experience leading audit engagements and working with frameworks such as SOC 2, ISO 27001, WebTrust, and NIST.
• Strong understanding of control design, control evaluation, regulatory interpretation, and assurance practices.
• Experience working directly with external auditors and regulatory bodies.
• Excellent analytical, problem-solving, and organizational skills, with the ability to manage complex initiatives independently.
• Strong written and verbal communication skills, including the ability to explain technical and regulatory requirements to varied audiences.
• Proven ability to influence stakeholders, challenge decisions constructively, and build alignment across teams.
• High degree of ownership, accountability, and autonomy.
• Preferred qualifications:Experience in Public Key Infrastructure (PKI), digital certificates, or cryptographic security environments.
• Relevant professional certifications such as CISSP, CISM, CISA, or CRISC.

Benefits

• Annual base salary range of
• $130,000–$160,000 USD
• , with final compensation determined by experience, skills, qualifications, responsibilities, business needs, and location.
• Comprehensive medical, dental, and vision coverage.
• Retirement savings programs with employer matching, including 401(k) or RRSP options where applicable.
• Generous paid time off, including vacation and holidays.
• Paid parental leave and family support benefits.
• Life and disability insurance coverage.
• Flexible spending accounts and health savings options, where applicable.
• Health and wellness programs, including gym reimbursement.
• Employee Assistance Program offering confidential, 24/7 support for employees and their families.
• Education assistance, professional development opportunities, and access to LinkedIn Learning.
• Employee referral bonuses, additional perks, and discounts.
• Rewards and recognition programs celebrating achievements and contributions.
• Business travel insurance and global employee support programs.