Manager Security Compliance

Entrust

Entrust is a trusted global leader in identity, payments, and data security solutions. Learn more about our cutting-edge solutions.

Career Growth, Flexibility and Collaboration!

Entrust is an innovative leader in identity-centric security solutions, providing an integrated platform of scalable, AI-enabled security offerings. Headquartered in Minnesota, we offer our colleagues the ability to work globally, in a flexible and collaborative environment. Our team makes an impact!

The Company: Entrust relies on curious, dedicated and innovative individuals who anticipate the future and provide solutions for a more connected, mobile, and secure world. Entrust’s technologies and expertise help government agencies, enterprises, and financial institutions in more than 150 countries serve and safeguard citizens, employees, and consumers.

We Believe: Securing identities is most effective when we value all identities. We are committed to ensuring that, through diversity and inclusion, the many voices that make up our communities are heard. Entrust expects and encourages all individuals to accept and respect one another.

Position Overview:

We are seeking a talented leader to join our InfoSec department. The Information Security Compliance Manager will lead and oversee security compliance advisory services to the Entrust organization and ensure that our information security compliance posture aligns with regulatory and contractual requirements.

Responsibilities:

1. Provide management and leadership of the ISMS program supporting the implementation, operation, and maintenance of the Information Security Management System based on the ISO/IEC 27000 series of standards, including certification against ISO/IEC 27001 and SOC 2.
2. Advise and support on Product related regulatory requirements and certifications such as ETSI, e-IDAS, UK DIATF, NIST 800-63.
3. Manage and coordinate external and internal audits and collaborate with stakeholders to manage audits.
4. Perform/support information security risk assessments designed to assess the control environment of the business processes, systems, and services under review including third-party risk assessments.
5. Review new standards and regulations where applicable, work with various business functions to ensure ongoing adherence to enhance compliance and achieve business objectives (e.g., NIS 2 Directive, DORA, EU AI Act).
6. Support the maintenance and management of a system and control inventory including identification of supporting roles.
7. Develop remediation and corrective action plans with related governance and operational functions (such as Product, Engineering, Risk Management, IT, HR, Legal, and Privacy).
8. Support info sec compliance related RFIs and provide advisory to business, legal, and sales teams in understanding the relevant obligations within contracts to limit company-wide security liability and align contract language with company security portfolio.
9. Assist with development, review, and revisions of information security policies, standards, procedures, and guidelines as applicable.
10. Assist with the development and operation of related compliance monitoring and improvement activities to ensure compliance both with internal security policies and applicable laws and regulations.
11. Update job knowledge by tracking and understanding emerging information security compliance practices and standards and frameworks.
12. Review, prioritize, and recommend information security improvements as they relate to the achievement of business goals and objectives.

Basic Qualifications:

1. Bachelor’s Degree.
2. 8+ years of experience.
3. Strong Audit and Compliance background as a minimum.
4. Strong Security Governance, Risk, and Compliance experience.
5. Experience enabling compliance and facilitating audits in support of ISO 27001, ETSI, SOC2.
6. In-depth understanding of IT Security concepts (threats, vulnerabilities, controls, countermeasures, risk management, etc.).
7. Knowledge of information security functions (i.e., security operations, security engineering, security architecture, vulnerability management, incident response functions).
8. Excellent working knowledge of common IT Security technologies such as:

• Security Event & Information Management Systems.
• Identity and Access Management Systems.
• Single Sign-On and Two-factor authentication.
• Firewalls, Content Filtering.
• Anti-Virus software, Intrusion Detection/Prevention, Vulnerability Assessment software.

Preferred Qualifications:

1. ISO 27001 lead auditor, or audit experience.
2. One or more relevant professional certifications (e.g., CISSP, CISM, CISA, CIPM, etc.).

Entrust Corporation is an EOE/AA/Veteran/People with Disabilities employer.

#LI-NR1

For US roles, or where applicable:

Entrust is an EEO/AA/Disabled/Veterans Employer.

For Canadian roles, or where applicable:

Entrust values diversity and inclusion and we are committed to building a diverse workforce with wide perspectives and innovative ideas. We welcome applications from qualified individuals of all backgrounds, and we strive to provide an accessible experience for candidates of all abilities.

#J-18808-Ljbffr