TC - CS - Data Protection and Privacy - Manager - PKI

Key Responsibilities

• Lead end to end discovery programs for SSH keys, SSL/TLS certificates, and cryptographic assets across hybrid enterprise environments.


• Oversee analysis of key and certificate usage patterns, drive identification of security gaps, and define enterprise level remediation strategies.


• Establish, implement, and enforce secure lifecycle management practices for SSH, SSL/TLS certificates, and related cryptographic controls.


• Direct cryptographic discovery across applications, services, and infrastructure to ensure full visibility of cryptographic primitives and algorithms in use.


• Conduct enterprise cryptographic posture assessments, including quantum readiness evaluations.


• Drive collaboration with architecture, engineering, and development teams to define and deploy quantum safe cryptographic strategies.


• Develop, review, and maintain comprehensive documentation, standards, operating models, and security governance for cryptographic systems.


• Mentor team members and guide technical deliverables across cryptography and PKI initiatives.

Required Skills

• Minimum 7+ years of experience in Cybersecurity with demonstrated expertise in PKI, cryptography, and certificate lifecycle management.


• Deep hands on experience with platforms such as Venafi, AppViewX, Thales, Sectigo, MSFT AD CS, and enterprise CLM/crypto platforms.


• Proven experience leading enterprise scale cryptographic discovery, assessment, and remediation programs.


• Strong understanding of cryptographic architecture, PKI, SSL/TLS, SSH, HSMs, trust stores, and secure automation practices.


• Experience with Linux/Unix/Windows administration and scripting/automation (Python, Bash, PowerShell).


• Solid understanding of cloud ecosystems (AWS, Azure, GCP) and cloud native certificate/key services.


• Strong stakeholder management, communication, and leadership skills with the ability to translate complex technical concepts for diverse audiences.