Position Overview:

The Director of Product Compliance will lead a team of regulatory, compliance and policy experts, and have responsibility for ensuring compliance with all applicable legal, regulatory, and industry standards, requirements, and related audits for Entrust’s Data Security product and service portfolio. The Director, Product Compliance must be organized, efficient and flexible; work well under pressure; understand highly technical products and services; develop strong, cross-functional partnerships; and thrive in a fast-paced environment.

Responsibilities:

The following represent the key responsibilities of the role as they exist today. This role may expand to include responsibilities that may be new to the Director, Product Compliance.

Product Compliance

- Develop, implement and enforce procedures and policies to ensure compliance of Entrust’s Data Security Solutions product portfolio against applicable legal, regulatory, and certification requirements.
- Lead required product-specific internal and external audits to ensure they are completed on time, with high quality and within budget parameters.
- Obtain and maintain product accreditations and certifications as required to meet internal policy and external regulatory requirements. Make recommendations and manage efforts to secure other certifications as deemed necessary to facilitate sales into specific industry sectors.
- Provide support, as needed, for compliance certifications that are relevant to the entire company (e.g., ISO 27001 or Federal Government Authority to Operate (ATO)).
- Work closely with internal teams to perform risk assessments to identify areas of vulnerability related to compliance and security of the DSS product suite and manage tracking and updating of risks in manual or GRC tools.
- Work closely with internal teams to ensure that vulnerabilities discovered in any of the DSS products, services or the infrastructure on which these are run are resolved within service level expectations.
- Maintain product-specific dashboards and periodically report on metrics that speak to ongoing compliance status.




- Leverage automation and collaboration with cross-functional teams to ensure, to the greatest extent possible, continuous visibility into compliance status in near real time.
- Manage Entrust’s relationships with third-party partners, shared service providers, external auditors and regulators.
- Work across teams and departments as needed to provide guidance on compliance and security requirements and controls.
- Oversee product-related incident handling and change management procedures.
- Lead Entrust’s Policy Management Authority (EPMA) team, including meeting scheduling, agenda and content creation or gathering input from relevant stakeholders. Distribute meeting minutes and track and manage any resulting actions through completion.
- Provide updates to senior leadership, including periodic updates to the Compliance Governance Board and other Entrust boards and committees upon request.

Leadership & People Management

- Perform general management responsibilities such as hiring, performance management, performance reviews, and individual development activities.
- Monitor team performance against department standards and ensure that these standards are consistently met or exceeded.
- Act as escalation point for issues and provide leadership and guidance to team.
- Set transparent direction and manage projects effectively through strong planning, organization, and execution.

Basic Qualifications:

- Minimum of 10+ years progressive, applicable experience
- Bachelor’s degree in MIS, Business, or related field. Masters degree is a plus.
- Hands-on experience setting up and using Governance, Risk Management and Compliance (GRC) tools and ability to quickly understand and leverage new GRC tools and processes as the need arises.




- Prior experience planning and executing compliance certifications including at a minimum WebTrust for CA, SOC 2, and FedRAMP (20x experience is a plus).
- Understanding of, and experience with one or more of the following: hardware security modules (HSMs), Key Management Systems (KMS), Public Key Infrastructure (PKI), Certificate Lifecycle Management (CLM), Document Signing, Identity and Access Management (IAM), and the corresponding standards, regulatory frameworks, and certifications for products in these categories.
- Prior experience with the creation and maintenance of PKI Certificate Policies (CP), Certification Practice Statements (CPS) and Registration Practice Statements (RPS), and in particular as these relate to the U.S. Federal Government Common Policy and Federal Bridge.

Preferred Qualifications:

- Prior experience using any of the Entrust Data Security products or web services.
- Prior use and understanding of compliance frameworks, including ISO 27001, NIST 800-53, FIPS 140-3, Common Criteria and EU Common Criteria (at EAL 4+), ETSI, tScheme, etc.
- Understanding of existing and evolving regulatory regimes like EU Cyber Resilience Act (CRA), General Data Protection Act (GDPR), and California Consumer Privacy Act (CCPA).
- Prior experience participating in the Federal Public Key Infrastructure Policy Authority (FPKI PA) or Federal Policy Authority Work Group (FPKI WG).

Where you will be: This role is open to a fully remote work model for candidates based in the U.S. or Canada . About Entrust : Entrust keeps the world moving safely by enabling trusted identities, payments, and data protection around the globe. Today more than ever, people demand seamless, secure experiences, whether they’re crossing borders, making a purchase, or accessing corporate networks. With our unmatched breadth of digital security and credential issuance solutions, it’s no wonder the world’s most entrusted organizations trust us.

For more information, visit www.entrust.com. Follow us on, LinkedIn, Facebook, Instagram, and YouTube Entrust Corporation is an EOE/AA/Veteran/People with Disabilities employer.

NO AGENCIES, NO RELOCATION

📌 Director, Product Compliance – Data Security (Canada)
🏢 Entrust
📍 Canada