EYTC - CS - Data Protection and Privacy - Manager - PKI
About this role
Key Responsibilities
- Lead end to end discovery programs for SSH keys, SSL/TLS certificates, and cryptographic assets across hybrid enterprise environments.
- Oversee analysis of key and certificate usage patterns, drive identification of security gaps, and define enterprise level remediation strategies.
- Establish, implement, and enforce secure lifecycle management practices for SSH, SSL/TLS certificates, and related cryptographic controls.
- Direct cryptographic discovery across applications, services, and infrastructure to ensure full visibility of cryptographic primitives and algorithms in use.
- Conduct enterprise cryptographic posture assessments, including quantum readiness evaluations.
- Drive collaboration with architecture, engineering, and development teams to define and deploy quantum safe cryptographic strategies.
- Develop, review, and maintain comprehensive documentation, standards, operating models, and security governance for cryptographic systems.
- Mentor team members and guide technical deliverables across cryptography and PKI initiatives.
Required Skills
- Minimum 7+ years of experience in Cybersecurity with demonstrated expertise in PKI, cryptography, and certificate lifecycle management.
- Deep hands on experience with platforms such as Venafi, AppViewX, Thales, Sectigo, MSFT AD CS, and enterprise CLM/crypto platforms.
- Proven experience leading enterprise scale cryptographic discovery, assessment, and remediation programs.
- Strong understanding of cryptographic architecture, PKI, SSL/TLS, SSH, HSMs, trust stores, and secure automation practices.
- Experience with Linux/Unix/Windows administration and scripting/automation (Python, Bash, PowerShell).
- Solid understanding of cloud ecosystems (AWS, Azure, GCP) and cloud native certificate/key services.
- Strong stakeholder management, communication, and leadership skills with the ability to translate complex technical concepts for diverse audiences.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
Apply now » Apply now- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function:- "route" is used for session stickiness
- "careerSiteCompanyId" is used to send the request to the correct data center
- "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
- "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another
Advertising Cookies
These cookies serve ads that are relevant to your interests. You may freely choose to accept or decline these cookies at any time. Note that certain functionality that these third parties make available may be impacted if you do not accept these cookies.
Consent to all Advertising Cookies