Job Description
ECCO Gulf Majorel Qatar is seeking an experienced PKI Compliance Specialist to join our team in Qatar. As a key player in our Information Technology and Services sector, you will ensure the integrity and security of our Public Key Infrastructure (PKI) systems. Your role will involve maintaining compliance with industry standards and regulations, and supporting the implementation of secure digital communications.
- Develop and maintain PKI policies and procedures to ensure compliance with relevant standards and regulations.
- Conduct regular audits and assessments of PKI systems to identify and mitigate risks.
- Collaborate with IT and security teams to implement PKI solutions and enhancements.
- Ensure that all Trust Service Providers (TSPs) comply with internal policies, international standards, and applicable trust service frameworks (e.g., eIDAS, CA/B Forum).
- Develop and maintain compliance procedures, certificate lifecycle documentation, and governance frameworks for PKI environments.
- Conduct internal audits, risk assessments, and gap analyses of PKI operations, focusing on key areas such as certificate issuance, revocation, and key storage.
- Evaluate and validate Certificate Signing Requests (CSRs) for accuracy, legitimacy, and alignment with policy requirements.
- Assist in defining and maintaining Certificate Policies (CP) and Certification Practice Statements (CPS) to support operational and regulatory compliance.
- Coordinate with internal security, infrastructure, and operations teams to address non-compliance issues and propose effective remediation plans.
- Stay informed on updates to PKI-related regulations, technical standards, and best practices; ensure continuous alignment with evolving global frameworks.
- Support the incident response process for certificate misuse or suspected key compromise, and participate in root cause investigations.
- Perform technical reviews and compliance verification of third-party trust services integrated into the environment.
- Provide guidance and training to stakeholders on PKI compliance practices, certificate management, and secure key handling procedures.
- Maintain accurate records of certificate inventories, compliance status reports, and audit findings for regulatory or contractual audits.
- Performs any other related duties as required.