Data Security Risk Advisor

The Judge Group; Dallas, Fort Worth (TX, TX); On-site; USD 130,000 - 190,000; Full time

Job summary

The Judge Group is seeking a Data Security Risk Advisor to provide first-line risk leadership across enterprise data protection, encryption, cryptographic controls, and post-quantum readiness initiatives. You will partner with security, architecture, cloud, AI, and engineering teams to evaluate risk and drive informed security decisions.

This role emphasizes risk identification, evidence-based remediation plans, and clear ownership of material risks across data, identities, cloud, privacy,

Qualifications

• Extensive experience in Data Security Architecture, Information Protection, or Cybersecurity Risk Management.
• Deep knowledge of encryption technologies, cryptography, PKI, and certificate lifecycle management.
• Strong understanding of cloud data protection and security controls across enterprise environments.

Responsibilities

• Provide first-line risk leadership for data protection, encryption, and certificate lifecycle practices.
• Assess data security risks across cloud, applications, analytics, endpoints, and AI solutions.
• Identify cryptographic gaps, certificate risks, and key management weaknesses.
• Develop risk scenarios including data exfiltration, misuse, corruption, and loss.

Skills

Data security architecture

Information protection

Cybersecurity risk management

Encryption technologies

Cryptography

PKI

Certificate lifecycle management

Cloud data protection

Security controls

First-line risk

Analytical skills

Communication

Stakeholder management

Influence without ownership

Job description

We're seeking a highly experienced Data Security Risk Advisor to provide first-line risk leadership across enterprise data protection, encryption, cryptographic controls, and post-quantum readiness initiatives. This role partners closely with security, architecture, cloud, AI, and engineering teams to evaluate risk, challenge assumptions, and help drive informed security decisions across the organization.

Key Responsibilities

• Provide first-line risk oversight for data discovery, classification, protection, encryption, key management, and certificate lifecycle practices.
• Assess data security risks across cloud platforms, applications, analytics environments, endpoints, and emerging AI solutions.
• Identify and evaluate cryptographic dependencies, encryption gaps, certificate risks, and key management weaknesses.
• Develop risk scenarios involving data exfiltration, misuse, corruption, loss, and cryptographic failure.
• Partner with architecture and engineering teams to support crypto-agility strategies and post-quantum cryptography readiness efforts.
• Evaluate technical debt, security exceptions, and control deficiencies based on business criticality and data sensitivity.
• Analyze incidents, recurring issues, and control failures to identify systemic security risks and trends.
• Define meaningful risk indicators and metrics related to encryption, key rotation, certificate exposure, data movement, and transition readiness.
• Communicate findings and recommendations to technical teams, risk leadership, and executive stakeholders.
• Drive accountability by ensuring material risks have clear ownership, decisions, and evidence-based remediation plans.

Required Qualifications

• Extensive experience in Data Security Architecture, Information Protection, or Cybersecurity Risk Management.
• Deep expertise in:
• Encryption technologies
• Cryptography
• Public Key Infrastructure (PKI)
• Certificate Lifecycle Management
• Strong understanding of cloud data protection and security controls across modern enterprise environments.
• Experience assessing and managing cyber risk from a first-line risk, security architecture, or security advisory perspective.
• Knowledge of cryptographic dependency mapping, crypto-agility, and post-quantum cryptography concepts.
• Ability to connect security risks across data, identity, cloud, privacy, resiliency, and AI domains.
• Strong analytical, communication, and stakeholder management skills.
• Proven ability to influence decisions and drive outcomes without direct ownership of technology delivery.

Preferred Experience

• Experience supporting enterprise cryptographic modernization programs.
• Familiarity with NIST, ISO 27001, and industry security frameworks.
• Exposure to cloud platforms such as AWS, Azure, or Google Cloud.
• Background in financial services, healthcare, or other highly regulated industries.
• Experience assessing emerging security risks related to AI and advanced analytics platforms.