Senior Trust Assurance Specialist
Listed on 2026-05-27
-
IT/Tech
Cybersecurity, Information Security
Digi Cert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered Digi Cert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose Digi Cert to stop today’s threats and prepare for a quantum-safe future at
Job SummaryWe are seeking a Senior Trust Assurance Specialist (FedRAMP Focus) to join the Trust Office team s role is responsible for leading complex compliance and assurance activities, with a particular focus on FedRAMP and U.S. public sector regulatory requirements, while also contributing broadly across Digi Cert’s global compliance program.
The successful candidate will have 6–7+ years of experience in compliance, risk management, or audit, with strong experience in FedRAMP / FISMA environments and a solid understanding of broader cybersecurity frameworks. This individual will operate with a high degree of autonomy, acting as a key liaison for audits, regulatory engagements, and FedRAMP-related activities.
This role reports to the Head of Compliance and works closely with cross-functional teams across Security, IT, Legal, and Operations.
What you will do- Leads complex compliance domains, audit engagements, or regulatory areas
- Provides subject matter expertise, particularly in FedRAMP and NIST-based frameworks
- Influences stakeholders and drives alignment on compliance and control decisions
- Operates with a high degree of autonomy and accountability
- Acts as a key escalation point for complex compliance or audit issues
- Lead external and customer audit engagements (e.g., SOC 2, Web Trust, FedRAMP), including planning, execution, and stakeholder coordination
- Act as a primary point of contact for auditors and assessors, ensuring effective communication and successful audit outcomes
- Oversee audit evidence preparation, walkthroughs, and issue resolution
- Ensure timely and effective remediation of audit findings
- Lead and support FedRAMP authorization and continuous monitoring activities, including coordination of security documentation, control implementation, and audit readiness
- Support the maintenance and accuracy of key FedRAMP artifacts (e.g., SSP, POA&M, control evidence)
- Act as a key liaison with authorizing agencies, 3
PAOs, and external stakeholders - Interpret and apply NIST 800-53 and related FedRAMP requirements within Digi Cert’s environment
- Ensure alignment between FedRAMP requirements and broader compliance frameworks
- Support maintaining audit readiness and authorization posture, including ongoing monitoring and POA&M oversight
- Interpret and apply regulatory and industry standards (e.g., Web Trust for CAs, ISO 27001, NIST, SOC
2) across the organization - Ensure alignment between regulatory requirements, internal policies, and control design across the organization
- Stay informed of emerging regulatory changes and assess their impact on Digi Cert
- Lead the design, evaluation, and enhancement of controls to ensure effectiveness and alignment with regulatory requirements
- Provide guidance on complex control issues, particularly in NIST/FedRAMP environments
- Identify systemic control gaps and drive remediation strategies
- Provide guidance on risk assessments and ensure alignment between compliance and risk management activities
- Drive integration of compliance requirements into broader risk frameworks
- Build and maintain strong relationships with senior stakeholders across Security, IT, Legal, HR, and Operations
- Influence decision-making to ensure compliance objectives are met without unnecessary friction
- Provide mentorship and guidance to Analysts and Specialists
- Act as an escalation point for complex compliance, audit, or FedRAMP-related issues
- Identify and drive improvements in compliance processes, tools, and reporting
- Contribute to the maturity and…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).