Technical Project Manager - Audit Programs

About the role

DigiCert is looking for a Technical Project Manager in Cape Town to own the planning, execution and evidence behind its portfolio of annual audit and certification programs, anchored by WebTrust and ETSI/eIDAS and extending to SOC 2, ISO 27001 and other attestations. The audits cover almost every function of the company, from PKI operations and product and engineering to IT, validation, support, legal, HR, finance and facilities.

Key responsibilities

• Run the end-to-end audit lifecycle across multiple programs, from scoping and readiness through fieldwork, report issuance and publication, including WebTrust and ETSI programs and others such as SOC 2, ISO 27001, FedRAMP and Adobe AATL.
• Manage the master audit calendar, sequencing overlapping audit windows, auditor fieldwork and report deadlines so teams are not overloaded.
• Extend the control mapping across each program so evidence can be reused and gaps between frameworks are visible early.
• Identify control owners across the organisation and keep them engaged and accountable, and coordinate evidence collection with clear deadlines and completeness tracking.
• Support auditor and assessor coordination by scheduling sessions, tracking and routing requests and keeping clarifications and draft report reviews moving.
• Coordinate the Common Control Framework (CCF) program, including planning, timelines, control mapping, ownership tracking, GRC platform readiness and cross-functional follow-up.
• Brief interviewees, schedule walkthroughs and ensure control owners can explain and demonstrate their controls.
• Triage findings and nonconformities, assign owners, track corrective actions to closure and recognise issues that appear in several audits.
• Provide concise, bottom-line-first status to leadership on risks, decisions needed and recommended actions.

Required profile

• 5+ years of project or program management experience in compliance, security or a regulated technical environment.
• Hands-on experience managing multiple third-party audits or certifications at once, including direct work with external auditors.
• Experience with WebTrust and/or ETSI audits, or comparable attestations such as SOC 2 or ISO 27001.
• Solid understanding of the audit lifecycle: scoping, management assertions, evidence sampling, findings and report issuance.
• Ability to coordinate across a large organisation and drive outcomes through influence rather than authority.
• Technical fluency with PKI and security concepts (CA hierarchies, key management, certificate lifecycle, HSMs).

Required skills

• Agile and/or Waterfall project management.
• Project and documentation tools such as Jira, Confluence and Smartsheet, and strong spreadsheet skills.
• Nice to have: experience in a public Certificate Authority or Trust Service Provider, familiarity with CA/Browser Forum Baseline Requirements, eIDAS and qualified trust services, and certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor or PMP.

What we offer

• Competitive compensation and a comprehensive benefits package.
• Paid time off, family-friendly leave including maternity and paternity leave, and health and wellness support.
• Pension, life insurance and income protection (location dependent), and an Employee Assistance Program.
• Educational assistance, access to LinkedIn Learning, referral bonuses and travel insurance.