AVP-Architect- PKI / CLM and Post Quantum Crypto (India, Poland)

Standard Chartered; Województwo mazowieckie; Hybrid; PLN 300,000 - 420,000; Full time

Benefits offered by this job

Flexible working options

Wellbeing programs

Learning & development opportunities

Diversity & inclusion

Job summary

Standard Chartered seeks a seasoned Data Security Architect to design, implement and govern robust data security frameworks across on‑prem and cloud environments. The role shapes protection architecture, validates controls, and ensures compliance with security standards and regulations.

You will own PKI and encryption product strategy, drive automation, and collaborate with Engineering, Infrastructure Services and App Development to deliver resilient data security services that support business

Qualifications

• Mandatory technical skills in Encryption, PKI and Key Management, plus certificate lifecycle management.
• Experience designing and implementing data security solutions across on-prem and cloud.
• Familiarity with post-quantum concepts, security architecture and enterprise governance.

Responsibilities

• Lead PKI and Digital Certificate Management strategy and automation.
• Advise on PKI, encryption, key management initiatives within the bank.
• Drive cloud-based certificate management initiatives.

Skills

PKI

Digital Certificate Management

Encryption

Key Management

Cloud Security

Data Security Architecture

Security Governance

Regulatory Compliance

Threat Modeling

Automation

Education

CISSP/CISA/CISM/TOGAF

Tools

HSM

Certificate Lifecycle Mgmt

Automation Tools

Cloud Security Tools

Job description

Job Summary

Please note: This position is available in both India and Poland. When applying, ensure to select the appropriate country from the provided dropdown menu that corresponds to your preferred work location.

We are looking for a seasoned Data Security Architect to join our team, someone who will lead the design, implementation, and governance of robust data security frameworks within our enterprise. This role demands expertise in safeguarding sensitive information across diverse environments including on-premises data centres and cloud platforms. The successful candidate will be instrumental in shaping our data protection architecture, validating security controls, and maintaining adherence to industry security standards and compliance requirements. This is a pivotal role that supports our organisational commitment to data security, ensuring trust and integrity in our operations.

Key Responsibilities

• Drive strategy, deliverables and operating model for the architecture and automation function of the PKI and Digital Certificate Management.
• Provides expert advice and drives various PKI, Digital Certificate Management, Encryption and Key management initiatives within the bank.
• Drives Cloud based initiatives related to certificate management.
• Carry out Security Impact Assessments (SIA) for applications against defined Data Protection (DP) security controls.
• Makes recommendations to improve maturity of existing tools and capabilities improve protection.
• Identify capability uplift opportunities to ensure an appropriate toolset, technologies and processes are in place to optimise and achieve effective and resilient Data Security Services supporting the team's operational objectives.
• Own the PKI & Encryption / Key Management products strategy based on the evaluation of internal and external threat trends, business needs, regulatory and corporate drivers.
• Work with Engineering, Infrastructure Services, and Application Development organizations to develop appropriate technology solutions and facilitates integration. Develops standards in partnership with Engineering, Infrastructure Services, and Application Development.
• Identify and lead automation initiatives for the PKI and Certificate Management Service.

Strategy

• Awareness and understanding of the Group’s business strategy and model appropriate to the role

Business

• Awareness and understanding of the wider business, economic and market environment in which the Group operates
• Work in collaboration with business and internal stakeholders

Processes

• Ensure compliance to Enterprise Software Delivery Lifecycle (eSDLC)

People & Talent

• Lead through example and build the appropriate culture and values.
• Work in collaboration with business, technology and operations partners.

Risk Management

• Ensure adherence with the highest standards of ethics and compliance with relevant policies, process, and regulations

Governance

• Awareness and understanding of the regulatory framework, in which the Group operates, and the regulatory requirements and expectations relevant to the role.
• Ensure Change Delivery Standards are upheld

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, elevate, mitigate and resolve risk, conduct and compliance matters.
• Lead to achieve the outcomes set out in the Bank’s Conduct Principle

Key stakeholders

• Data Protection Head, Product Owners, Scrum Masters
• Enterprise Architects and Domain Architect
• CIO and CISO functions
• Risk and Governance
• Other relevant functions with Technology Services including Infrastructure Services (Database, Network & Platform)

Other Responsibilities

• Embed Here for good and Group’s brand and values in India /ICS / Data Security. Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats).

Skills And Experience

• Mandatory technical skills and strong understanding of Encryption technologies topics such as Encryption, Key Management, Public Key Infra design and setup, Certificate Lifecycle mgmt. and HSM services
• Should have experience in Designing Architecture, Implementing Data security solutions
• Should have experience in Post- Quantum Cryptography, Digital Assets,Security Architecture & Enterprise Architecture.
• Should have experience in Creating Strategy, Roadmap, Business Requirement Document etc for any infra services or products
• Should be comfortable in at least one scripting language, understand use of REST protocols, and experience in integrating tools to provide a unified solution set is desirable and Knowledge and experience in at least one programming language is a plus
• Proven ability to map and understand complex relationships and interactions between Enterprise Architecture, business direction, emerging trends and technologies
• Strong understanding of the cyber-attack vectors and able to articulate the cyber kill chain and relevant controls to protect and detect events
• Experience with enterprise Data Lifecycle, data flows and design, security principles, computing infrastructure, Data topology and Crypto lifecycle
• Excellent communication skills - oral, written and presentation; technical reporting writing across various types of target audiences.
• Overall 12+ years of experience in Data Security/ICS

Qualifications

• Industry certifications will be a plus - CISSP / CISA / CISM / TOGAF

About Standard Chartered

We're an international bank, nimble enough to act, big enough for impact. For more than 170 years, we've worked to make a positive difference for our clients, communities, and each other. We question the status quo, love a challenge and enjoy finding new opportunities to grow and do better than before. If you're looking for a career with purpose and you want to work for a bank making a difference, we want to hear from you. You can count on us to celebrate your unique talents and we can't wait to see the talents you can bring us.

Our purpose, to drive commerce and prosperity through our unique diversity, together with our brand promise, to be here for good are achieved by how we each live our valued behaviours. When you work with us, you'll see how we value difference and advocate inclusion.

Together We

• Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
• Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
• Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term

What We Offer

In line with our Fair Pay Charter,

• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.