Data Security Governance Lead for Post-Quantum Readiness

KeyCorp; Brooklyn (OH); Hybrid; USD 96,000 - 181,000; Full time

Job summary

KeyCorp is seeking a Data Security Governance Manager to lead a team protecting KeyBank and client data through enterprise data security governance, monitoring, encryption, and key management. The role guides governance maturity and readiness for post-quantum cryptography.

Responsibilities include establishing data protection requirements, collaborating with security architects, and driving a program to inventory cryptographic assets while aligning with enterprise risk management objectives.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, IT, CS, Data Management, or equivalent experience.
• Experience leading information security, data security, governance, or related teams.
• Strong written and verbal communication translating security topics to business risk.
• Experience with governance docs, procedures, and reporting.

Responsibilities

• Lead and develop a data security governance team focused on monitoring, key management, certificate lifecycle, and HSM support.
• Provide direction for monitoring capabilities, alert tuning, and production issue resolution.
• Support data protection posture management and establish governance requirements aligned with standards.
• Oversee centralized encryption key management oversight and lifecycle health.
• Drive post-quantum cryptography readiness and coordinate with stakeholders for migration planning.

Skills

Leadership

Risk-based decision making

Data security governance

Executive communication

Automation mindset

Stakeholder management

Operational execution

Education

Bachelor's degree in Information Security or related field

Certifications such as CISSP/CISM/CISA/CDPSE

Tools

SecuPi

Microsoft Purview

BigID

Google Key Management Services

DigiCert

AppViewX

Atalla hardware security module

Job description

KeyCorp is seeking a Data Security Governance Manager to lead a team protecting KeyBank and client data through enterprise data security governance, monitoring, encryption, and key management. The role guides governance maturity and readiness for post-quantum cryptography.

Responsibilities include establishing data protection requirements, collaborating with security architects, and driving a program to inventory cryptographic assets while aligning with enterprise risk management objectives.