Certified Digital Identity Compliance Analyst

We are looking for engineers capable of shaping the world, taking on new challenges and exceeding goals. People who think differently to redefine what is possible.

Professional experience in ICT projects, of which at least 3 years performing activities related to digital identity or its regulatory compliance.

Minimum required: 6 years

Experience leading certification processes, security audits, conformity assessments, and regulatory compliance schemes in the ICT field.

Minimum required: 2 years

Experience participating in normative analysis activities, requirements definition, and functional governance in projects related to digital identity, trust services, verifiable credentials, electronic signatures, eIDAS, digital wallets, or equivalent frameworks.

Minimum required: 1 year

Experience in security control definition, regulatory requirements analysis, risk management, compliance audits, and security governance.

Minimum required: 2 years

Experience coordinating multidisciplinary teams in the field of digital transformation

Minimum required: 2 years

Experience leading certification processes, security audits, conformity assessments, and regulatory compliance schemes in the ICT field.

Desirable: 5 years

Desirable: 5 years

Experience in security control definition, regulatory requirements analysis, risk management, compliance audits, and security governance.

Desirable: 5 years

Experience coordinating multidisciplinary teams in the field of digital transformation

Desirable: 5 years

Experience in liaison with certifying bodies, assessment laboratories, or security auditing entities

Desirable: 4 years

At least 1 year of experience in the coordination of certification projects or regulatory adaptation specifically related to the European Digital Identity Wallet (EUDI Wallet) ecosystem, eIDAS 2.0, Verifiable Credentials, Digital Identity Wallets, or advanced electronic trust services.

Desirable: 4 years

At least 1 year of experience in the preparation, coordination, and monitoring of functional or cybersecurity audits, including the management of evidence, findings, non-conformities, and corrective actions.

Desirable: 4 years

At least two (2) certifications from the following: ISO/IEC 27001 Lead Auditor, CISA (Certified Information Systems Auditor), CISM, or CISSP, with it being mandatory to hold at least one of the following: ISO/IEC 27001 Lead Auditor or CISA.

At least one (1) of the following certifications: ISO/IEC 27001 Lead Auditor or CISA (Certified Information Systems Auditor).

Quest Global is a place where we value curiosity, authenticity, and the talent of every individual.

We believe that the diverse experiences and backgrounds of our team bring us unique perspectives, which is why, in your workplace, you will be able to unleash your creativity, explore possibilities, propose ideas that are heard and valued, and grow both professionally and personally.

At Quest Global, you will benefit from:

· Individual development plan and mentoring programs: technical training and certifications covered by the company. Access to more than 7,000 learning platforms and language training based on the needs of the position.

· One day off for your birthday, +23 working days of vacation per year, and December 24th and 31st as non-working days.

· Work-life balance plans, flexible working hours, and remote work policy depending on the project and position characteristics.

· Access to telemedicine and medical check-ups through an app, as well as other benefits such as mental health support or fully subsidized exercise programs.

· Flexible compensation plan: private health insurance, restaurant tickets, transport tickets, nursery voucher, and care ticket for dependent relatives.

· Corporate Social Responsibility Committee and employee resource groups (ERGs) to promote professional development in equality and diversity. Programs to promote women in STEM careers and charitable initiatives focused on children.

· Team activities: sports, team-building, emotional management, and the annual Quest Global Fest.

If you are a curious person, the kind who is not satisfied with just one piece of the puzzle, apply for this position. We would love to meet you!

Would you like to help us solve the biggest engineering challenges?

If you are looking for your next challenge, this is your opportunity:

Execution of a service for the Comprehensive Management Service of the Digital Identity services certification process, including the coordination of functional and cybersecurity certification activities, the management of regulatory and normative requirements, the preparation and maintenance of the certification file, liaison with assessment bodies, as well as the maintenance of compliance and the preparation of future recertifications derived from the functional evolution of the solution.

The service must guarantee the obtaining, maintenance, and renewal of the functional and cybersecurity certifications required by the European schemes applicable to EUDI Wallets or similar initiatives.

The scope will include requirements management and traceability, preparation and maintenance of evidence, planning and execution of internal audits, as well as support and accompaniment during external certification audits, monitoring, and recertification.

Likewise, the management of findings, non-conformities, and observations will be contemplated, as well as the definition and monitoring of corrective actions and coordination with auditing and certification entities until the satisfactory closure of the process.

Comprehensive coordination of the certification process for Digital Identity services, acting as the sole person responsible and central interlocutor for it, coordinating and aligning the cybersecurity, legal, and technical/development teams to guarantee compliance with established deadlines, coherence between functional, security, and regulatory requirements, and the correct prioritization of resources before the various evaluation milestones.

Collection, analysis, interpretation, and consolidation of the functional, organizational, technical, and security requirements demanded by the certification scheme, including the definition, design, and documentation of those controls, procedures, or organizational requirements that are not available and are necessary to comply with the applicable scheme.

Continuous monitoring and follow-up of the evolution of the applicable regulatory, normative, and certification framework, analyzing the impact of new versions of schemes, regulations, or requirements on Digital Identity services and defining the corresponding adaptation plans to maintain compliance and the validity of the certifications.

Planning, preparation, and coordination of internal audits, aimed at verifying the degree of compliance with certification requirements, identifying possible deviations, gaps, or non-conformities, and ensuring the adequate preparation of the solution prior to external evaluations.

Preparation, coordination, and support during external audits, including the planning of audit activities, presentation and defense of compliance evidence, as well as accompaniment and leadership of functional and cybersecurity evaluation sessions.

Preparation and consolidation of the final certification file, integrating the documentation, controls, evidence, and information required by the evaluation and certification bodies to obtain the functional and cybersecurity certifications.

Preparation and maintenance of the traceability matrix, linking each requirement of the certification scheme with its corresponding control, the associated technical or organizational evidence, the person responsible for its compliance, and its status.

Direct liaison with assessment laboratories, auditing entities, and certification bodies, managing inquiries, requests for information, evidence, and clarifications related to the evaluation and certification processes.

Analysis and consolidation of findings, observations, and non-conformities, including their

classification, assignment of responsible parties, and monitoring of corrective actions until their closure