Senior Trust Assurance Specialist

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Trust Assurance Specialist based in the United States. The Senior Trust Assurance Specialist will lead complex compliance, audit, and assurance initiatives, helping maintain strong governance and regulatory alignment across the organization. This senior-level role combines deep technical knowledge of cybersecurity and compliance frameworks with the ability to influence decisions across multiple business functions.

You will serve as a key contact for external auditors and customer assurance engagements, while guiding the design and effectiveness of internal controls. Working closely with Security, IT, Legal, HR, and Operations, you will translate regulatory requirements into practical, sustainable compliance practices. The position offers significant autonomy, opportunities to mentor colleagues, and the ability to contribute directly to the maturity and scalability of a global trust and security program.

• Lead external and customer audit engagements, including SOC 2 and Web Trust assessments, from planning through execution and follow-up.
• Serve as a primary point of contact for external auditors, coordinating communications, evidence requests, walkthroughs, and issue resolution.
• Oversee audit evidence preparation and ensure findings are addressed through timely and effective remediation.
• Interpret and apply relevant regulatory and industry frameworks, including Web Trust for Certificate Authorities, ISO 27001, NIST, and SOC 2.
• Monitor regulatory developments and assess their implications for internal policies, control frameworks, and organizational practices.
• Lead the design, evaluation, testing, and continuous improvement of internal controls to ensure effectiveness and regulatory alignment.
• Identify systemic control gaps, recommend remediation strategies, and provide guidance on complex control matters.
• Contribute to risk assessments and help integrate compliance requirements into broader enterprise risk management activities.
• Build relationships with senior stakeholders across Security, IT, Legal, HR, and Operations, influencing decisions and promoting consistent compliance practices.
• Mentor and support Analysts and Specialists, sharing subject matter expertise and strengthening team capabilities.
• Drive improvements in compliance processes, tools, and reporting to support a more mature and scalable compliance program.

• Bachelor's degree in Law, Compliance, Information Security, Computer Science, or a related discipline.
• At least 6 years of professional experience in compliance, risk management, audit, or a related field.
• Demonstrated experience leading audit engagements and working with frameworks such as SOC 2, ISO 27001, Web Trust, and NIST.
• Strong understanding of control design, control evaluation, regulatory interpretation, and assurance practices.
• Experience working directly with external auditors and regulatory bodies.
• Excellent analytical, problem-solving, and organizational skills, with the ability to manage complex initiatives independently.
• Strong written and verbal communication skills, including the ability to explain technical and regulatory requirements to varied audiences.
• Proven ability to influence stakeholders, challenge decisions constructively, and build alignment across teams.
• High degree of ownership, accountability, and autonomy.
• Preferred qualifications:
  
  Experience in Public Key Infrastructure (PKI), digital certificates, or cryptographic security environments.
• Relevant professional certifications such as CISSP, CISM, CISA, or CRISC.

• Annual base salary range of
• $130,000–$160,000 USD
• , with final compensation…