Compliance Manager - PKI

Position Overview

Entrust is seeking an experienced individual to support our Data Security Services (DSS) Compliance team, as it relates to leading projects and assessments in support of industry compliance frameworks (e.g., WebTrust for CA (WTCA) and other applicable standards).

Responsibilities

• Ensure Entrust’s Public Key Infrastructure Certificate Authority (PKI CA) products meet applicable compliance frameworks, customer contractual requirements, and emerging standards across multiple communities of trust.
• Provide support as needed to ensure that other DSS products remain in compliance with the applicable frameworks, regulatory requirements and customer contractual requirements for each.
• Escalate compliance issues that arise in production service environments to the Entrust Policy Management Authority (EPMA) while maintaining on-going ownership of the issues and supporting PA/EPMA direction through issue resolution.
• Facilitate external auditor engagements, organize required compliance evidence, schedule required resources, submit required reports, and manage audit timelines.
• Closely monitor and advise product and development teams on regulatory priorities and emerging PKI use cases from multiple communities of trust (e.g., financial services, healthcare, government).
• Feedback and monitor requirements and/or requirements change for each community of trust to the internal teams, ensuring alignment with Entrust’s compliance strategy.
• Represent Entrust and take the lead on standards body engagement, as directed.
• Make recommendations and follow-up to mitigate compliance risks and drive continuous improvement.
• Oversee and drive the end-to-end operational security compliance and audit programs for WTCA and other applicable frameworks.
• Review and make recommendations on operational procedures to ensure they efficiently and effectively comply with all relevant requirements.
• Contribute applicable metrics to product compliance scorecards.
• Serve as the internal and customer-facing subject matter expert on compliance frameworks (including WTCA and others). Advise customers and internal stakeholders on best practices, compliance, and audit processes across multiple standards.
• Assist with other audits and compliance activities relating to DSS product compliance, as requested.
• Manage project document repository; maintain strict deadlines and positive vendor/customer relationships.
• Gather feedback from customers, partners and other relevant external entities and provide that to the Product Managers for consideration as possible future service enhancements.

Qualifications

• Associate or bachelor’s Degree
• 5+ years of security compliance or audit experience with various compliance frameworks (e.g., WTCA, Netsec)
• Experience working with and detailed knowledge of Public Key Infrastructure (PKI) components and associated documentation, such as Certificate Policies (CP), Certification Practices Statement (CPS), Certification Authorities (CA), and Registration Authorities (RA)
• Ability to work in fast-paced environment, multi-task and prioritize
• Strong Governance, Risk Management and Compliance process experience
• Ability to work cross functionally with leaders and team members across time zones and continents
• Experience with internal controls, risk assessments, business processes and internal IT control testing or operational auditing
• Excellent writing, analytical and problem-solving skills
• Up to 10% travel requirement

Preferred Qualifications

• Prior experience with one or more of the following frameworks: NIST, FedRAMP, ISO, SOC 2, A-SIT, Common Criteria, DORA, eIDAS, ETSI, and NIAP
• Working knowledge of Enterprise Networking concepts
• Basic project management experience
• Relevant certifications such as Certified Regulatory Compliance Manager (CRCM) or similar