Associate Director Cybersecurity Architecture - Quantum Security

Deloitte • Dayton, OH

1d • $137,400 - $282,100

About The Position

The Associate Director, Quantum Security is a leadership role within Deloitte Technology-US (DT-US) Cyber Risk and Compliance, with matrixed relationships across Cyber Operations, Security Architecture, Cyber Design, and technology and business leaders. The role defines and executes the enterprise quantum-security strategy and leads a multi-year migration to quantum-resistant cryptography across Deloitte’s technology environment.

As a member of the DT-US Cyber Security leadership team, the Associate Director advises executive stakeholders on quantum risk, regulatory drivers, investment needs, and program progress. The role protects long-lived sensitive data from harvest-now, decrypt-later threats, aligns Deloitte with NIST and NSA guidance, and establishes cryptographic agility as standards evolve. It also serves as Deloitte’s senior technical voice with industry partners and standards communities.

The position leads enterprise cryptographic discovery and inventory, prioritizes remediation according to data sensitivity and exposure, and directs implementation of standardized post-quantum algorithms and hybrid approaches across relevant systems. It establishes cryptographic governance, integrates quantum risk into enterprise and third-party risk processes, manages program resources and milestones, and develops a team and broader organizational competency in quantum security. The role requires a bachelor’s degree or equivalent, at least 10 years of cybersecurity experience, at least 4 years supporting highly regulated environments, and at least 2 years of people and/or process management experience. Travel averages 10%. The position is available in multiple U.S. locations. The disclosed estimated compensation range is $137,400 to $282,100, with possible eligibility for a discretionary annual incentive program.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
• At least 10 years of cybersecurity experience, including defining and executing enterprise security or cryptographic strategies aligned with business objectives, regulatory requirements, and risk appetite.
• At least 4 years supporting highly regulated environments, such as federal, defense, audit and financial services, or critical infrastructure.
• At least 2 years of people and/or process management experience.
• Ability to travel an average of 10%, based on the work and clients and industries/sectors served.
• Must be legally authorized to work in the United States without employer sponsorship now or at any time in the future.
• Ability to work independently and collaboratively.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor and provide clear guidance to others.

Nice To Haves

• Advanced degree (master’s or higher) in Information Security, Computer Science, Mathematics, Engineering, or a related field.
• Strong working knowledge of post-quantum cryptography and migration challenges, including key and signature sizes, performance, and hybrid modes.
• Deep knowledge of NIST FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE migration publications.
• Knowledge of NSA CNSA 2.0, NSM-10, and OMB M-23-02.
• Knowledge of FIPS 140-3 / CMVP, Zero Trust architecture, and federal mandates.
• Deep understanding of PKI, TLS, key management, HSMs, and secure software and firmware signing.
• Experience leading an enterprise cryptographic inventory or large-scale cryptographic migration program.
• Proven ability to influence senior stakeholders, drive enterprise-wide change in matrixed environments, and translate complex technical risk into business terms.
• Experience engaging vendors, industry consortia, and standards bodies; speaking, publishing, or participating in standards work.
• Industry certifications such as CISSP, CISM, CCSP, CISA, GIAC, or equivalent experience.

Responsibilities

• Define and execute an enterprise quantum-security strategy and multi-year post-quantum cryptography (PQC) migration roadmap aligned with business objectives, regulatory requirements, and enterprise risk appetite.
• Advise executive leadership on quantum risk, regulatory drivers, investment needs, and program progress, including through briefings to senior leaders and governance forums.
• Lead cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish cryptographic bill-of-materials practices.
• Prioritize systems based on data sensitivity, data shelf life, and exposure to harvest-now, decrypt-later attacks; oversee remediation planning and execution.
• Direct design and implementation of NIST-standardized algorithms and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.
• Co-sponsor proof-of-concept testing, performance benchmarking, and interoperability validation, and drive cryptographic agility so algorithms can be replaced without major re-engineering.
• Ensure alignment with applicable NIST guidance, NSA CNSA 2.0 requirements and timelines, federal directives, and FIPS 140-3 validated-module requirements.
• Establish cryptographic governance, including policies, standards, and risk-based decision frameworks; integrate quantum risk into enterprise risk, third-party risk, procurement, and architecture review processes.
• Liaise with technology vendors, cloud providers, HSM and PKI vendors, and consortia; evaluate vendor roadmaps and hold suppliers accountable for PQC readiness in contracts.
• Represent Deloitte in industry working groups, standards forums, and information-sharing communities, and engage clients and regulators as a thought leader.
• Manage program budget, resourcing, and delivery milestones in alignment with risk reduction, regulatory compliance, and business priorities.
• Lead and develop a team of cryptography, PKI, and security architecture professionals, and build quantum-security competency through training, reference architecture, and playbooks.

Benefits

• Broad range of employee benefits (specific benefits are not listed).
• Possible eligibility for a discretionary annual incentive program, subject to program rules and individual and organizational performance.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior