Senior Trust Assurance Specialist

Who we are

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com

 

Job summary

We are seeking a Senior Trust Assurance Specialist (FedRAMP Focus) to join the Trust Office team at DigiCert. This role is responsible for leading complex compliance and assurance activities, with a particular focus on FedRAMP and U.S. public sector regulatory requirements, while also contributing broadly across DigiCert’s global compliance program.

The successful candidate will have 6–7+ years of experience in compliance, risk management, or audit, with strong experience in FedRAMP / FISMA environments and a solid understanding of broader cybersecurity frameworks. This individual will operate with a high degree of autonomy, acting as a key liaison for audits, regulatory engagements, and FedRAMP-related activities.

This role reports to the Head of Compliance and works closely with cross-functional teams across Security, IT, Legal, and Operations.

 

What you will do

Level Expectations

• Leads complex compliance domains, audit engagements, or regulatory areas
• Provides subject matter expertise, particularly in FedRAMP and NIST-based frameworks
• Influences stakeholders and drives alignment on compliance and control decisions
• Operates with a high degree of autonomy and accountability
• Acts as a key escalation point for complex compliance or audit issues

Audit & Assurance Leadership

• Lead external and customer audit engagements (e.g., SOC 2, WebTrust, FedRAMP), including planning, execution, and stakeholder coordination
• Act as a primary point of contact for auditors and assessors, ensuring effective communication and successful audit outcomes
• Oversee audit evidence preparation, walkthroughs, and issue resolution
• Ensure timely and effective remediation of audit findings

FedRAMP & Regulatory Compliance (Core Focus)

• Lead and support FedRAMP authorization and continuous monitoring activities, including coordination of security documentation, control implementation, and audit readiness
• Support the maintenance and accuracy of key FedRAMP artifacts (e.g., SSP, POA&M, control evidence)
• Act as a key liaison with authorizing agencies, 3PAOs, and external stakeholders
• Interpret and apply NIST 800-53 and related FedRAMP requirements within DigiCert’s environment
• Ensure alignment between FedRAMP requirements and broader compliance frameworks
• Support maintaining audit readiness and authorization posture, including ongoing monitoring and POA&M oversight

Regulatory Compliance & Advisory (Broader Scope)

• Interpret and apply regulatory and industry standards (e.g., WebTrust for CAs, ISO 27001, NIST, SOC 2) across the organization
• Ensure alignment between regulatory requirements, internal policies, and control design across the organization
• Stay informed of emerging regulatory changes and assess their impact on DigiCert

Control Design & Oversight

• Lead the design, evaluation, and enhancement of controls to ensure effectiveness and alignment with regulatory requirements
• Provide guidance on complex control issues, particularly in NIST/FedRAMP environments
• Identify systemic control gaps and drive remediation strategies

Risk & Compliance Integration

• Provide guidance on risk assessments and ensure alignment between compliance and risk management activities
• Drive integration of compliance requirements into broader risk frameworks

Stakeholder Leadership

• Build and maintain strong relationships with senior stakeholders across Security, IT, Legal, HR, and Operations
• Influence decision-making to ensure compliance objectives are met wit