Policy & Audit Manager

About the role

The Policy & Audit Manager will lead the development, maintenance, and enforcement of information security policies and audit processes for the NPKI compliance program. This role ensures alignment with national and local regulations while supporting business and IT partners in secure operations.

Key responsibilities

• Review and update existing policies and procedures to prevent unauthorized or non‑compliant actions.
• Draft, maintain, and publish information security policy, guidance, process, and procedure documents.
• Develop and manage a repository of reference documents for security architectures, technical standards, and project requirements.
• Conduct leading‑practice research and analysis of security policies.
• Collaborate with IT and business teams to ensure security documentation meets operational needs.
• Ensure compliance with industry standards and regulations for digital certificates.
• Represent the company in standards organizations and regulatory bodies such as Mozilla, NIST, and the CA/Browser Forum.
• Track WebTrust audit requirements against NPKI CP/CPS and act as primary point of contact for audit activities.

Required profile

• Bachelor's degree in IT, Information Systems, Computer Science or related field.
• 10+ years of experience working with industry standards bodies and regulations.
• Qualified auditor with proven audit experience.

Required skills

• In‑depth knowledge of Public Key Infrastructure (PKI) and its practical application.
• Expertise in digital certificate standards and regulations.
• Familiarity with NIST guidelines, CA/Browser Forum Baseline Requirements, and EV Guidelines.
• Experience with WebTrust audit processes and CP/CPS documentation.