PKI Security Architect & Governance Specialist

Swift; Leiden; On-site; EUR 140,000 - 170,000; Full time

Job summary

Swift, the world's leading provider of secure financial messaging, seeks an exceptional PKI Security Architect to design and govern mission-critical PKI infrastructures. You will drive governance, policy, and PQC initiatives across the organization, ensuring regulatory compliance and robust cryptographic controls.

With 15+ years in PKI and deep technical expertise, you will align security with business needs, manage stakeholders, and guide complex projects in a dynamic environment.

Qualifications

• Master's degree in IT, CS or cybersecurity.
• 15+ years in PKI security architecture and governance.
• Experience building PKI governance frameworks and docs.
• Expertise with CA, X.509, lifecycle, HSMs, signatures, non-repudiation.
• Knowledge of relevant regulations and compliance standards.
• Proficiency in PQC and classical cryptography.
• Excellent written and verbal communication for diverse audiences.
• Proven track record managing mission-critical projects.

Responsibilities

• Develop a security strategy and future-proof PKI architecture.
• Lead PKI transition to PQC with cryptographic agility.
• Establish PKI governance, policies, root ceremonies, and docs.
• Ensure regulatory compliance and support audits and risk assessments.
• Act as SME on PKI security, governance, and compliance.
• Collaborate with IT and Operations to deploy PKI infrastructures.

Skills

PKI architecture

PKI governance

X.509 certificates

Certificate lifecycle

Hardware security modules

Post-Quantum Cryptography

Stakeholder management

Communication skills

Education

Master's degree in IT/Cybersecurity

Job description

About Us

We're the world's leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value - across borders, through cities and overseas. No other organization can address the scale, precision, pace and trust that this demands, and we're proud to support the global economy.

About Us

We're the world's leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value - across borders, through cities and overseas. No other organization can address the scale, precision, pace and trust that this demands, and we're proud to support the global economy. We're unique too. We were established to find a better way for the global financial community to move value - a reliable, safe and secure approach that the community can trust, completely. We're always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.

What To Expect

• Develop a comprehensive security strategy and design a future-proof security architecture for mission-critical PKI infrastructures.
• Lead and oversee the strategic transition of PKI infrastructure to Post-Quantum Cryptography (PQC), ensuring cryptographic agility while maintaining robust security requirements and controls.
• Establish and uphold a strong PKI governance framework, implementing detailed policies, practices and procedures. Supervise root key ceremonies and other critical CA processes, define resilient incident response and recovery procedures, and develop and maintain certificate policies and practice statements, and other essential documentation.
• Ensure ongoing compliance with relevant regulations and industry standards, support audit reviews and risk assessments, and proactively monitor the evolving threat and regulatory landscape.
• Serve as a subject matter expert on PKI security, governance, and compliance. Provide authoritative guidance and keep the organization abreast of latest trends, technologies, and industry best practices.
• Manage stakeholders and collaborate closely with IT and Operations teams responsible for deploying and operating the PKI infrastructures to ensure alignment with security and governance requirements.

What You Need To Be Successful

• Master's degree in information technology, computer science, cybersecurity, or a closely related discipline.
• Robust background in cybersecurity, with at least 15 years of professional experience in PKI security architecture and governance, and a proven track record supporting mission-critical infrastructures.
• Extensive experience in developing, implementing, and overseeing comprehensive PKI governance frameworks, policies and processes, and related documentation.
• Expert-level PKI knowledge and demonstrated experience with Certification Authorities, X.509 digital certificates, certificate lifecycle management, certificate revocation lists, key management, hardware security modules, digital signatures, non-repudiation, and associated technologies.
• Thorough understanding and practical application of industry regulations and compliance standards relevant to PKI.
• Proficient in both classic and post-quantum cryptography (PQC), including asymmetric algorithms and related cryptographic protocols and standards.
• Excellent written and verbal communication skills, capable of clearly conveying complex technical concepts to non-specialists and senior stakeholders.
• Demonstrated drive, dynamism, and strong results orientation, with a proven ability to manage high-stakes, mission-critical projects effectively.

What We Offer

We give you the freedom to be yourself. We are creating an environment of unique individuals - like you - with different perspectives on the financial industry and the world. A diverse and inclusive environment in which everyone’s voice counts and where you can reach your full potential.

We are committed to an inclusive and accessible recruitment process. If you require a reasonable accommodation related to accessibility during your application or interview, please contact [e-mail] or indicate this in your application.

Please note that this mailbox is not monitored for general recruitment enquiries and should only be used for accessibility or accommodation-related requests (for example related to vision, hearing or neurodiversity).

All requests are confidential and will not affect your candidacy.

Don’t meet every single requirement? At Swift, we are dedicated to building a workplace where people can bring their full selves and ideas to the team, so if you are excited about this role, we encourage you to apply even if you do not meet every single qualification.