Compliance Manager overseeing compliance processes and frameworks for Data Security Services at Entrust. Ensuring DSS products meet or exceed industry standards and mitigate compliance risks.
Responsibilities
Ensure Entrusts Public Key Infrastructure Certificate Authority (PKI CA) products meet applicable compliance frameworks, customer contractual requirements, and emerging standards across multiple communities of trust.
Provide support as needed to ensure that other DSS products remain in compliance with the applicable frameworks, regulatory requirements and customer contractual requirements for each.
Escalate compliance issues that arise in production service environments to the Entrust Policy Management Authority (EPMA) while maintaining on-going ownership of the issues and supporting PA/EPMA direction through issue resolution.
Facilitate external auditor engagements, organize required compliance evidence, schedule required resources, submit required reports, and manage audit timelines.
Closely monitor and advise product and development teams on regulatory priorities and emerging PKI use cases from multiple communities of trust (e.g., financial services, healthcare, government).
Feedback and monitor requirements and/or requirements change for each community of trust to the internal teams, ensuring alignment with Entrust’s compliance strategy.
Represent Entrust and take the lead on standards body engagement, as directed.
Make recommendations and follow-up to mitigate compliance risks and drive continuous improvement.
Oversee and drive the end-to-end operational security compliance and audit programs for WTCA and other applicable frameworks.
Review and make recommendations on operational procedures to ensure they efficiently and effectively comply with all relevant requirements.
Contribute applicable metrics to product compliance scorecards.
Facilitate timely identification, communication, and recommended resolution of compliance risks.
Serve as the internal and customer-facing subject matter expert on compliance frameworks (including WTCA and others).
Advise customers and internal stakeholders on best practices, compliance, and audit processes across multiple standards.
Requirements
Associate or bachelor’s Degree
5+ years of security compliance or audit experience with various compliance frameworks (e.g., WTCA, Netsec)
Strong Governance, Risk Management and Compliance process experience
Ability to work cross functionally with leaders and team members across time zones and continents
Experience with internal controls, risk assessments, business processes and internal IT control testing or operational auditing
Excellent writing, analytical and problem-solving skills
Security clearance or ability to obtain a security clearance (preferred)
Prior experience with one or more of the following frameworks: NIST, FedRAMP, ISO, SOC 2, A-SIT, Common Criteria, DORA, eIDAS, ETSI, and NIAP (preferred)
Product Owner driving evolving proactive security services portfolio across Risk Advisory, Application Security, and Cloud & AI Security. Collaborating with technology stakeholders to deliver high - value outcomes.
Loss Prevention Home Office Security Coordinator ensuring workplace safety and security for TJX Canada. Responsible for day - to - day monitoring and crisis management as a first responder.
Consultant managing complex cybersecurity projects remotely for Optiv in Vancouver. Establishing relationships and leading technology deployment in business continuity and resilience.
Manager of Global Security and Safety at Genetec leading global security programs and protecting physical assets. Collaborating with executive leadership to implement risk - based security strategies.
Product Manager directing the product roadmap and execution for OCIANA capabilities. Collaborating with stakeholders to enhance maritime security and operational decision - making.
Principal Business Information Security Officer at LastPass leading risk advisory and governance processes. Driving cross - functional collaboration to ensure scalable security frameworks in a competitive environment.
Cybersecurity Generalist role at PwC focusing on security solutions and cybersecurity practices. Leading projects and mentoring team members while identifying opportunities for the firm’s success.
Principal Security Researcher for Spellbook, focused on securing legal AI workflows and sensitive data. Engaging in red teaming, security research, and cross - department collaboration for risk reduction.
Security Consultant serving as the main contact for security services at Akamai. Provide guidance and implement solutions for customer needs regarding security products.