Trust Services Standards & Regulatory Specialist (eIDAS, ETSI)

Trust Services Standards & Regulatory Specialist

Position Overview

1. Standards & Regulatory Framework Management

• Maintain expert knowledge of international trust services and PKI frameworks, with a focus on the EU eIDAS Regulation as a benchmark for electronic identification and trust services.
• Apply eIDAS concepts such as electronic signatures, electronic seals, timestamps, electronic registered delivery services, website authentication, and electronic archiving within PKI-enabled trust models.
• Assess qualified and non-qualified trust services, including associated cryptographic assurance levels, regulatory implications, and compliance requirements.

• ETSI Trust Services & PKI Standards

• Develop and maintain expertise in ETSI EN 319 series standards, including:
• + EN 319 401 – General Policy and Security Requirements for Trust Service Providers
• + EN 319 411-1 / EN 319 411-2 – Certification Authorities and Qualified Certificates
• + EN 319 421 – Trusted Time-Stamping Services
• + EN 319 451 / EN 319 452 – Electronic Registered Delivery Services
• Support the interpretation and implementation of ETSI and PKI standards in licensing evaluations, technical reviews, and supervisory activities.
• Provide guidance on aligning technical and PKI requirements with internationally recognized assurance and compliance frameworks.

• Conformity Assessment, Audit & Supervision

• Support conformity assessments, audits, and ongoing supervision of Certification Service Providers (CSPs) and Trust Service Providers (TSPs).
• Review audit and assessment reports prepared by approved Conformity Assessment Bodies (CABs).
• Evaluate compliance against ETSI standards, PKI security requirements, and applicable regulatory frameworks.
• Assist in regulatory decisions related to qualification, compliance gaps, corrective actions, suspension, or revocation of trust services.

• Strategic Benchmarking & Policy Advisory

• Utilize eIDAS, ETSI, and PKI standards as benchmark models to support regulatory development and international alignment.
• Monitor developments related to eIDAS 2.0, digital identity wallets, advanced PKI implementations, and emerging trust services.
• Prepare briefing notes, regulatory guidance, position papers, and executive summaries for stakeholders and decision-makers.
• Translate complex technical and regulatory requirements into practical policy recommendations.

Qualifications & Experience

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, Law, Engineering, or a related field.
• Minimum 5–8 years of experience in PKI, digital trust services, cybersecurity compliance, regulatory affairs, or related domains.
• Experience working with regulators, auditors, certification bodies, trust service providers, or PKI operators is highly desirable.
• Professional certifications related to information security, PKI, cybersecurity, or compliance are considered an advantage.

Required Knowledge & Skills

• Strong understanding of eIDAS principles, legal assurance levels, and supervisory models.
• Solid knowledge of Public Key Infrastructure (PKI), including:

+ Certification Authorities (CA)

• + Certificate lifecycle management
• + Trust chains
• + Key management
• + Cryptographic assurance
• Practical experience with ETSI trust service standards and their application in audits and regulatory supervision.
• Knowledge of audit, accreditation, and conformity assessment frameworks related to trust services.
• Strong analytical, regulatory, and policy development capabilities.
• Excellent report writing, documentation, and stakeholder communication skills.
• Ability to translate international standards into enforceable regulatory requirements.

Preferred Skills

• Knowledge of digital identity ecosystems and trust frameworks.
• Familiarity with eIDAS 2.0 and Digital Identity Wallet initiatives.
• Experience in regulatory compliance, governance, risk management, and cybersecurity standards.
• Ability to work effectively with technical, legal, and executive stakeholders.

Skills