Senior Trust Assurance Specialist

Jobgether; United States; Remote; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401(k) retirement plan

Paid time off

Parental leave

Life and disability insurance

Gym reimbursement

Education assistance with LinkedIn LIn

Job summary

Jobgether is seeking an experienced Compliance and Audit leader in the United States. You will manage external audit engagements (SOC 2, ISO 27001, WebTrust, NIST) from planning through remediation, coordinating with auditors and internal stakeholders.

You will shape internal controls, monitor regulatory changes, and guide cross-functional teams to ensure regulatory alignment and risk mitigation.

Qualifications

• Bachelor's degree in a related discipline.
• 6+ years in compliance, risk management, audit, or related field.
• Experience leading audit engagements and frameworks (SOC 2, ISO 27001, WebTrust, NIST).

Responsibilities

• Lead external and customer audit engagements from planning to execution.
• Serve as primary contact for external auditors and coordinate communications.
• Oversee audit evidence preparation and remediation of findings.
• Interpret and apply regulatory frameworks (SOC 2, ISO 27001, NIST).
• Monitor regulatory developments and advise on policy implications.
• Design and improve internal controls for regulatory alignment.
• Identify control gaps and advise remediation strategies.
• Support risk assessments and enterprise risk management.
• Build relationships with senior stakeholders across departments.

Skills

Audit leadership

Regulatory frameworks

External auditor liaison

Communication

Problem solving

Education

Bachelor's degree in Law/Compliance/InfoSec/CS

Job description

Accountabilities

• Lead external and customer audit engagements, including SOC 2 and WebTrust assessments, from planning through execution and follow-up.
• Serve as a primary point of contact for external auditors, coordinating communications, evidence requests, walkthroughs, and issue resolution.
• Oversee audit evidence preparation and ensure findings are addressed through timely and effective remediation.
• Interpret and apply relevant regulatory and industry frameworks, including WebTrust for Certificate Authorities, ISO 27001, NIST, and SOC 2.
• Monitor regulatory developments and assess their implications for internal policies, control frameworks, and organizational practices.
• Lead the design, evaluation, testing, and continuous improvement of internal controls to ensure effectiveness and regulatory alignment.
• Identify systemic control gaps, recommend remediation strategies, and provide guidance on complex control matters.
• Contribute to risk assessments and help integrate compliance requirements into broader enterprise risk management activities.
• Build relationships with senior stakeholders across Security, IT, Legal, HR, and Operations, influencing decisions and promoting consistent compliance practices.
• Mentor and support Analysts and Specialists, sharing subject matter expertise and strengthening team capabilities.
• Drive improvements in compliance processes, tools, and reporting to support a more mature and scalable compliance program.

Requirements:

• Bachelor's degree in Law, Compliance, Information Security, Computer Science, or a related discipline.
• At least 6 years of professional experience in compliance, risk management, audit, or a related field.
• Demonstrated experience leading audit engagements and working with frameworks such as SOC 2, ISO 27001, WebTrust, and NIST.
• Strong understanding of control design, control evaluation, regulatory interpretation, and assurance practices.
• Experience working directly with external auditors and regulatory bodies.
• Excellent analytical, problem-solving, and organizational skills, with the ability to manage complex initiatives independently.
• Strong written and verbal communication skills, including the ability to explain technical and regulatory requirements to varied audiences.
• Proven ability to influence stakeholders, challenge decisions constructively, and build alignment across teams.
• High degree of ownership, accountability, and autonomy.

Preferred qualifications:

• Experience in Public Key Infrastructure (PKI), digital certificates, or cryptographic security environments.
• Relevant professional certifications such as CISSP, CISM, CISA, or CRISC.

Benefits:

• Annual base salary range of $130,000-160,000 USD , with final compensation determined by experience, skills, qualifications, responsibilities, business needs, and location.
• Comprehensive medical, dental, and vision coverage.
• Retirement savings programs with employer matching, including 401(k) or RRSP options where applicable.
• Generous paid time off, including vacation and holidays.
• Paid parental leave and family support benefits.
• Life and disability insurance coverage.
• Flexible spending accounts and health savings options, where applicable.
• Health and wellness programs, including gym reimbursement.
• Employee Assistance Program offering confidential, 24/7 support for employees and their families.
• Education assistance, professional development opportunities, and access to LinkedIn Learning.
• Employee referral bonuses, additional perks, and discounts.
• Rewards and recognition programs celebrating achievements and contributions.
• Business travel insurance and global employee support programs.