Cyber Data Protection/PKI Manager

Deloitte • Jersey City, NJ

165d • $134,500 - $265,100

About The Position

Deloitte’s Cyber Strategy & Transformation team helps clients develop and transform cyber programs in alignment with strategic objectives, regulatory requirements, and risk appetite. The team supports organizations in staying ahead of evolving threats and building confidence in their cybersecurity posture through areas such as cyber organization design, governance, and risk assessments.

The Cyber Data Protection/PKI Manager serves as a subject matter expert and trusted advisor on strategic and practical data protection and encryption requirements. The role advises clients on encryption, decryption, secure key management, and public key infrastructure strategies across cloud, on-premises, and hybrid environments. It designs, implements, and operates technology and process solutions that reduce data risk, including certificate lifecycle management, certificate infrastructure monitoring, and deployment of data protection solutions.

The manager drives day-to-day engagement execution, communicates progress to clients and Deloitte leadership, supports delivery teams, and tracks timelines to help ensure delivery is on time and within budget. The role also stays current on emerging encryption technologies and industry trends, and evaluates and recommends tools and solutions to strengthen data security. Travel is expected to average 25–50%, depending on assignments and clients served. Recruiting for this role ends on 12/31/2026.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Engineering, Computer Science, Information Technology, or a related field.
• 7+ years of professional experience in data protection and information security, potentially including Data Discovery, Data Classification and Rights Management, Data Access Governance, Data Loss Prevention, Cloud Access Security Broker, Encryption, Certificate Lifecycle Management, Cloud Security, or SaaS Security.
• 7+ years of experience with PKI concepts, including deep expertise in PKI architecture and enterprise trust models.
• 5+ years leading certificate lifecycle management strategy, design, and implementation using platforms such as AppViewX, Venafi, Keyfactor, DigiCert, or similar.
• Advanced knowledge of cryptography, certificate lifecycle processes, key management, HSM integration, and crypto policy enforcement.
• Ability to define target-state architecture, integration patterns, and operating models for large-scale environments.
• Hands-on understanding of certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, web and application servers, and network and security infrastructure.
• Strong client leadership skills, including executive stakeholder management, workshop facilitation, roadmap alignment, and decision-making support.
• Experience translating business, operational, and security requirements into architecture blueprints and implementation plans.
• Strong understanding of delivery governance, risk management, dependencies, and quality assurance for enterprise security transformations.
• Ability to travel an average of 25–50%, depending on work and clients served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills, meticulous attention to detail, and commitment to quality work product.
• Ability to build and sustain professional relationships and maintain a strong professional demeanor.
• Ability to lead projects or workstreams and mentor others.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment and meet deadlines.

Nice To Haves

• Familiarity with crypto-agility strategies and post-quantum cryptography readiness.
• Knowledge of adjacent domains such as IAM, PAM, secrets management, zero trust, and machine identity management.
• Experience with DevSecOps integration, CI/CD pipeline enablement, and API-driven automation.
• Working knowledge of Python, PowerShell, Bash, REST APIs, or infrastructure automation patterns.
• Understanding of cloud-native certificate and key services in AWS, Azure, and GCP.
• Awareness of regulatory, audit, and policy requirements that affect cryptographic controls.
• Experience with operating model design, service transition, and support model definition.
• Ability to support business development, solutioning, estimation, staffing, and proposal writing.
• Strong mentoring capability for junior practitioners and emerging technical leads.
• Comfort with executive-level reporting, issue escalation, and steering committee discussions.

Responsibilities

• Serve as a subject matter expert and trusted advisor to clients on strategic and practical data protection and encryption requirements based on emerging data risks.
• Advise clients on encryption, decryption, secure key management, and PKI strategies across cloud, on-premises, and hybrid environments.
• Design, implement, and operate technology and process solutions to reduce data risk, including certificate lifecycle management, certificate infrastructure monitoring, and data protection solution deployment.
• Drive day-to-day engagement execution by communicating updates to clients and Deloitte leadership, supporting delivery teams, and tracking timelines for on-time and on-budget delivery.
• Stay current on emerging encryption technologies and industry trends, and evaluate and recommend tools and solutions to strengthen data security.
• Lead technical workstreams, architects, engineers, and offshore and onshore teams.
• Translate business, operational, and security requirements into architecture blueprints and implementation plans.
• Support client leadership activities, including executive stakeholder management, workshop facilitation, roadmap alignment, and decision-making support.
• Lead discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs.
• Mentor and provide clear guidance to others.

Benefits

• Discretionary annual incentive program, subject to program rules and performance factors.
• Broad range of employee benefits.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager