Financial services experience.
Cybersecurity, data protection, encryption, PKI, or key management experience.
Exposure to CRI & NIST cybersecurity standards.
Knowledge of cryptographic controls, certificate management, or crypto-agility concepts.
Familiarity with Post-Quantum Cryptography (PQC) initiatives and emerging regulatory expectations.
Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems. Analyze and document cryptographic dependencies including:
Key management solutions
Database encryption
File and disk encryption
Tokenization and data masking solutions
Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.
Partner with engineering teams to develop crypto-agility requirements and transition roadmaps. Facilitate collection of encryption requirements for data at rest, data in transit, and data in use across enterprise environments.
Document cryptographic controls supporting:
Data Loss Prevention (DLP)
Database Security
Cloud Security
Identity & Access Management
Application Security
Third-Party Risk Management
Support evaluation and implementation planning for CRI & NIST Post-Quantum Cryptography standards and migration approaches.
Develop process flows and inventory models for cryptographic assets, certificates, keys, algorithms, and associated business owners.
Build reporting and dashboards tracking:
Cryptographic asset coverage
PQC readiness status
Encryption control maturity
High-risk cryptographic findings
Remediation milestones
Preferred Technical Experience
Knowledge of enterprise encryption technologies including AES-256, RSA, ECC, TLS, SSH, PGP, KMIP, and certificate lifecycle management.
Experience working with:
PKI platforms
Certificate Authorities
Hardware Security Modules (HSMs)
Key Management Systems (KMS)
Secrets Management platforms
Familiarity with cloud encryption technologies across AWS, Azure, and Google Cloud Platform.
Understanding of database encryption, transparent data encryption (TDE), column-level encryption, and tokenization.
Experience supporting cryptographic inventory or certificate inventory initiatives.
Familiarity with cryptographic scanning and discovery tools.
Understanding of NIST PQC algorithms (ML-KEM, ML-DSA, FN-DSA) and enterprise crypto-agility concepts.
Experience supporting regulatory requirements including NYDFS, FFIEC, PCI-DSS, and global banking security standards.
Never miss an opportunity! Create an alert based on the job you applied for.
