Data Security Governance Lead - Encryption & PQC Readiness

KeyBank; United States; On-site; USD 96,000 - 181,000; Full time

Benefits offered by this job

Incentive compensation eligibility

In-office with flexible options

Job summary

KeyBank is seeking a Data Security Governance Manager to lead a team responsible for protecting data through governance, monitoring, encryption, and key management. This role partners with technology and business teams to mature governance and prepare for post-quantum readiness.

The Senior Manager will guide daily operations, drive enterprise data protection controls, and align with risk management objectives while advancing cryptographic asset awareness across the organization.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• Experience leading information security, data security, or governance teams.
• Strong understanding of encryption, certificate management, and data protection.

Responsibilities

• Lead and develop a data security governance team responsible for database activity monitoring, centralized encryption key management, certificate lifecycle management, hardware security module support, and encryption and masking governance.
• Provide direction for database activity monitoring capabilities, including alert tuning, detection methodology development, monitoring use cases, whitelist governance, session monitoring, deployment support, and production issue resolution.
• Support teams responsible for data security posture management by helping establish data protection requirements, governance expectations, control considerations, and implementation guidance that align with enterprise security standards and risk management objectives.
• Manage centralized encryption key management governance, including review and approval of key requests, lifecycle oversight, key health monitoring, failover planning, automation improvements, and support for application teams.
• Oversee certificate lifecycle management processes, including certificate enrollments, renewals, re-issuances, revocations, expiration monitoring, outage prevention, certificate authority relationships, and alignment to industry standards.
• Provide governance and operational oversight for hardware security module capabilities, including Atalla support, master key management, security policy configuration, cryptographic key generation, and related control procedures.
• Lead efforts to improve understanding of the organization’s cryptographic assets, including keys, certificates, cryptographic services, algorithms, dependencies, ownership, and lifecycle considerations needed to support risk-based planning and governance.
• Drive a post-quantum cryptography readiness program by coordinating inventory, prioritization, stakeholder engagement, governance requirements, migration planning, and capabilities needed to prepare key services and cryptographic processes for future quantum-resistant standards.
• Collaborate closely with Security Architects to develop and maintain a capabilities roadmap for the team, ensuring governance processes, services, and tooling continue to align with enterprise security priorities and future-state data protection needs.
• Provide direction and oversight for data encryption and masking governance, including field-level encryption, key management requirements, application encryption processes, and related control procedure execution.
• Partner with Security Engineering, Cyber Defense, Cloud, Infrastructure, application teams, DAO stakeholders, vendors, and business partners to drive effective delivery of data security controls and remediation activities.
• Develop and maintain governance procedures, metrics, reporting, and executive-ready updates that demonstrate control effectiveness, operational health, risk reduction, and program maturity.

Skills

Leadership

Communication

Risk-based decisions

Data protection

Governance

Cross-functional collaboration

Education

Bachelor’s degree in Information Security / Cybersecurity / IT / CS / Data Management

Tools

SecuPi

Microsoft Purview

BigID

Google Key Management Services

DigiCert

AppViewX

Atalla HSM

Job description

KeyBank is seeking a Data Security Governance Manager to lead a team responsible for protecting data through governance, monitoring, encryption, and key management. This role partners with technology and business teams to mature governance and prepare for post-quantum readiness.

The Senior Manager will guide daily operations, drive enterprise data protection controls, and align with risk management objectives while advancing cryptographic asset awareness across the organization.