Trust Assurance Specialist at DigiCert, Inc.

Job summary

• We are seeking a Trust Assurance Specialist to join the Trust Office team at DigiCert. This role is responsible for owning defined compliance and assurance areas, including audit execution, control management, and regulatory alignment.
• The successful candidate will have a minimum of 5 years of experience in compliance, risk management, or audit, with the ability to independently manage audit and control activities and engage stakeholders across the organization.
• This role reports to the Head of Compliance and works closely with cross-functional teams across Security, IT, Legal, and Operations.

What you will do

Audit & Assurance Support

• Own and manage assigned external (e.g., SOC 2, WebTrust) and customer audits
• Plan audit activities, coordinate stakeholders, and ensure timely delivery of evidence
• Track, manage, and drive remediation of audit findings

Regulatory Compliance

• Ensure ongoing compliance within assigned frameworks (e.g., WebTrust for CAs, SOC 2, ISO 27001, NIST)
• Interpret regulatory requirements and ensure controls align with both regulatory expectations and internal policy frameworks 

Control Management

• Design, document, and evaluate controls to ensure effectiveness and compliance
• Perform and oversee control testing within assigned areas
• Identify control gaps and drive remediation efforts

Risk & Governance Support

• Provide input into risk assessments and support broader risk management activities.
• Assist in maintaining compliance documentation and reporting.

Stakeholder Collaboration

• Partner with internal teams (Security, IT, Legal, HR, Operations) to support compliance initiatives.
• Act as a point of contact for audit-related queries within assigned areas.

Continuous Improvement

• Stay informed on relevant regulatory and industry developments.
• Identify opportunities to improve compliance processes, tools, and reporting.

General

• Support a culture of compliance and security awareness across the organization.
• Perform other related duties as assigned.

What you will have

• Bachelor’s degree in Law, Compliance, Information Security, Computer Science, or a related field
• Minimum 5 years of experience in compliance, risk management, audit, or related roles
• Experience managing audits and working with frameworks such as SOC 2, ISO 27001, WebTrust, or NIST
• Experience in control design, documentation, and testing
• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management skills
• Ability to work independently and manage multiple priorities

Nice to have

• Exposure to PKI, cybersecurity, or cloud environments
• Progress toward or attainment of certifications such as CISA, CISM, CRISC, or CISSP