Compliance Manager overseeing compliance processes and frameworks for Data Security Services at Entrust. Ensuring DSS products meet or exceed industry standards and mitigate compliance risks.
Responsibilities
Ensure Entrusts Public Key Infrastructure Certificate Authority (PKI CA) products meet applicable compliance frameworks, customer contractual requirements, and emerging standards across multiple communities of trust.
Provide support as needed to ensure that other DSS products remain in compliance with the applicable frameworks, regulatory requirements and customer contractual requirements for each.
Escalate compliance issues that arise in production service environments to the Entrust Policy Management Authority (EPMA) while maintaining on-going ownership of the issues and supporting PA/EPMA direction through issue resolution.
Facilitate external auditor engagements, organize required compliance evidence, schedule required resources, submit required reports, and manage audit timelines.
Closely monitor and advise product and development teams on regulatory priorities and emerging PKI use cases from multiple communities of trust (e.g., financial services, healthcare, government).
Feedback and monitor requirements and/or requirements change for each community of trust to the internal teams, ensuring alignment with Entrust’s compliance strategy.
Represent Entrust and take the lead on standards body engagement, as directed.
Make recommendations and follow-up to mitigate compliance risks and drive continuous improvement.
Oversee and drive the end-to-end operational security compliance and audit programs for WTCA and other applicable frameworks.
Review and make recommendations on operational procedures to ensure they efficiently and effectively comply with all relevant requirements.
Contribute applicable metrics to product compliance scorecards.
Facilitate timely identification, communication, and recommended resolution of compliance risks.
Serve as the internal and customer-facing subject matter expert on compliance frameworks (including WTCA and others).
Advise customers and internal stakeholders on best practices, compliance, and audit processes across multiple standards.
Requirements
Associate or bachelor’s Degree
5+ years of security compliance or audit experience with various compliance frameworks (e.g., WTCA, Netsec)
Strong Governance, Risk Management and Compliance process experience
Ability to work cross functionally with leaders and team members across time zones and continents
Experience with internal controls, risk assessments, business processes and internal IT control testing or operational auditing
Excellent writing, analytical and problem-solving skills
Security clearance or ability to obtain a security clearance (preferred)
Prior experience with one or more of the following frameworks: NIST, FedRAMP, ISO, SOC 2, A-SIT, Common Criteria, DORA, eIDAS, ETSI, and NIAP (preferred)
Senior Cybersecurity Advisor providing support to threat and vulnerability analysts at Exposant 3 in a hybrid work model. Collaborating on incident responses and vulnerability management in a dynamic team.
Financial Security Advisor at RBC Insurance connecting clients with comprehensive insurance solutions. Building client relationships and leveraging RBC’s brand to grow the market.
Senior IAM Systems Support Analyst responsible for deploying and improving IAM services at RBC. Supporting MFA systems and ensuring platform reliability while collaborating with various teams.
Senior Manager overseeing IAM initiatives and strategic roadmap execution at RBC. Partnering with stakeholders to enhance organizational capabilities in Identity and Access Management.
Senior Internal Controller in information security defining security strategies and conducting risk analysis. Participating in audits and controls for a multidisciplinary firm in Canada.
Product Manager responsible for managing Microsoft Security Services portfolio at Softchoice. Engaging with customers, Microsoft and stakeholders to drive market success and growth.
Program Manager leading AI and data security initiatives at Canadian Tire Corporation. Maintaining compliance and aligning security strategies with business objectives.
Senior Information Security Governance Advisor at TEHORA defining security strategies and conducting risk analyses. Participating in audits and controls while supporting organizational and technological changes.