Technical Project Manager

Job summary

We're looking for a Technical Project Manager to own the planning, execution, and evidence behind our portfolio of annual audit and certification programs, anchored by WebTrust and ETSI/eIDAS and extending to [SOC 2, ISO 27001, and other attestations]. These audits reach nearly every function in the company: PKI operations, product, engineering, IT, validation, support, legal, HR, finance, facilities, and more. You'll keep scope accurate, evidence complete and on time, findings remediated with clear ownership, and reports delivered ahead of root program, regulatory, and customer deadlines.

You'll run multiple audit programs in parallel, each with its own auditor, criteria, calendar, and deliverables, and you'll find the overlap between them so teams aren't asked for the same evidence five times.

What you will do

• Run the end-to-end audit lifecycle across multiple programs, from scoping and readiness through fieldwork, report issuance, and publication. Core programs include WebTrust (CA, SSL Baseline with Network Security, EV SSL, Code Signing, S/MIME) and ETSI (EN 319 401, EN 319 411-1/-2, eIDAS conformity assessments), alongside [SOC 2, ISO 27001, FedRAMP, Adobe AATL, other programs].
• Manage the master audit calendar. Sequence overlapping audit windows, auditor fieldwork, and report deadlines so teams aren't overloaded and nothing collides.
• Carry the unified control framework forward. Take ownership of the control mapping already in flight and extend it across each program, so evidence can be reused across audits and gaps between frameworks are visible early.
• Work across the whole company. Identify control owners wherever they sit (engineering, infrastructure, IT, validation and vetting, support, HR, legal, finance, facilities and physical security, vendor management) and keep them engaged and accountable through each cycle.
• Coordinate evidence collection with clear expectations, deadlines, and completeness tracking, so nothing surfaces for the first time during fieldwork.
• Support auditor and assessor coordination. Help the audit leads keep interactions with external auditors and conformity assessment bodies running smoothly by scheduling sessions, tracking and routing requests, and keeping clarifications and draft report reviews moving.
• Coordinate the Common Control Framework (CCF) program. Support CCF planning, timelines, control-mapping activities, ownership tracking, GRC platform readiness, and cross-functional follow-up across audit, compliance, risk, technology, and business teams.
• Prepare people for fieldwork. Brief interviewees, schedule walkthroughs, and make sure control owners can explain and demonstrate their controls.
• Drive findings and nonconformity remediation across programs. Triage observations, assign owners, track corrective actions to closure, and recognize when one issue produces findings in several audits.
• Communicate clearly upward. Provide concise, bottom-line-first status across the portfolio, with risks, decisions needed, and recommended actions.

What you will have

• 5+ years of project or program management experience in compliance, security, or a regulated technical environment
• Hands-on experience managing multiple third-party audits or certifications at once, including direct work with external auditors
• Experience with WebTrust and/or ETSI audits, or comparable attestations such as SOC 2 or ISO 27001
• Experience managing projects u sing Agile and/or Waterfall methodologies 
• Proficiency with project and documentation tools (e.g., Jira, Confluence, Smartsheet) and strong spreadsheet skills
• Solid understanding of the audit lifecycle: scoping, management assertions, evidence sampling, findings, and report issuance
• Proven ability to coordinate across a large organization and drive outcomes through influence rather than authority, including with teams that don't see themselves as compliance stakeholders
• Technical fluency to engage with PKI and security concepts (CA hierarchies, key management, certificate lifecycle, HSMs) and ask the right questions of subject-matter experts
• Comfort building structure where it doesn't exist and holding owners accountable to deadlines

Nice to have

• Direct experience in a public Certificate Authority or Trust Service Provider
• Experience working with control frameworks that let evidence be reused across multiple audits
• Familiarity with the CA/Browser Forum Baseline Requirements, root program policies, and CCADB audit disclosure requirements
• Knowledge of eIDAS and qualified trust services (QWACs, QSealCs, qualified timestamps) and supervisory body processes
• Certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor, or PMP (a plus, not a requirement)
• Experience working with globally distributed teams, including overlap with European working hours

How You'll Be Successful

• Every audit starts with accurate scope, complete evidence, and no surprises in fieldwork.
• Teams are asked for evidence once and it's reused across programs wherever possible.
• Every control has a named owner who knows what's expected and when.
• Reports are issued and submitted ahead of root program, regulatory, and customer deadlines.
• Findings are remediated with verifiable evidence and don't repeat the following year.
• Leadership always knows portfolio-wide audit status, risk, and decisions needed.

Benefits

• Competitive compensation and comprehensive benefits package 
• Generous paid time off, including holidays and additional leave options 
• Family-friendly leave policies, including maternity, paternity, and other supportive leave programs 
• Health and wellness support, including medical cover (where applicable), gym reimbursements, and mental well-being resources 
• Pension, life insurance, and income protection benefits (location dependent) 
• Employee Assistance Program with 24/7 confidential support for employees and their families 
• Education assistance and professional development opportunities 
• Access to LinkedIn Learning and continuous learning resources 
• Employee referral bonus program and additional company perks and discounts 
• Business travel insurance and global employee support programs

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

#LI-FP1

__PRESENT

__PRESENT

__PRESENT