Senior Trust Assurance Specialist

Accountabilities • Lead external and customer audit engagements, including SOC 2 and WebTrust assessments, from planning through execution and follow-up.

• Serve as a primary point of contact for external auditors, coordinating communications, evidence requests, walkthroughs, and issue resolution.

• Oversee audit evidence preparation and ensure findings are addressed through timely and effective remediation.

• Interpret and apply relevant regulatory and industry frameworks, including WebTrust for Certificate Authorities, ISO 27001, NIST, and SOC 2.

• Monitor regulatory developments and assess their implications for internal policies, control frameworks, and organizational practices.

• Lead the design, evaluation, testing, and continuous improvement of internal controls to ensure effectiveness and regulatory alignment.

• Identify systemic control gaps, recommend remediation strategies, and provide guidance on complex control matters.

• Contribute to risk assessments and help integrate compliance requirements into broader enterprise risk management activities.

• Build relationships with senior stakeholders across Security, IT, Legal, HR, and Operations, influencing decisions and promoting consistent compliance practices.

• Mentor and support Analysts and Specialists, sharing subject matter expertise and strengthening team capabilities.

• Drive improvements in compliance processes, tools, and reporting to support a more mature and scalable compliance program.

Requirements:

• Bachelor's degree in Law, Compliance, Information Security, Computer Science, or a related discipline.

• At least 6 years of professional experience in compliance, risk management, audit, or a related field.

• Demonstrated experience leading audit engagements and working with frameworks such as SOC 2, ISO 27001, WebTrust, and NIST.

• Strong understanding of control design, control evaluation, regulatory interpretation, and assurance practices.

• Experience working directly with external auditors and regulatory bodies.

• Excellent analytical, problem-solving, and organizational skills, with the ability to manage complex initiatives independently.

• Strong written and verbal communication skills, including the ability to explain technical and regulatory requirements to varied audiences.

• Proven ability to influence stakeholders, challenge decisions constructively, and build alignment across teams.

• High degree of ownership, accountability, and autonomy.

Preferred qualifications:

• Experience in Public Key Infrastructure (PKI), digital certificates, or cryptographic security environments.

• Relevant professional certifications such as CISSP, CISM, CISA, or CRISC.

Benefits:

• Annual base salary range of $130,000–$160,000 USD , with final compensation determined by experience, skills, qualifications, responsibilities, business needs, and location.

• Comprehensive medical, dental, and vision coverage.

• Retirement savings programs with employer matching, including 401(k) or RRSP options where applicable.

• Generous paid time off, including vacation and holidays.

• Paid parental leave and family support benefits.

• Life and disability insurance coverage.

• Flexible spending accounts and health savings options, where applicable.

• Health and wellness programs, including gym reimbursement.

• Employee Assistance Program offering confidential, 24/7 support for employees and their families.

• Education assistance, professional development opportunities, and access to LinkedIn Learning.

• Employee referral bonuses, additional perks, and discounts.

• Rewards and recognition programs celebrating achievements and contributions.

• Business travel insurance and global employee support programs.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1