Senior Manager - Security Encryption and Certificate Services (People Leader)

Sua oportunidade

em Schwab, você tem o poder de causar impacto em sua carreira. Aqui, o pensamento inovador atende à solução criativa de problemas, ajudando -nos a "desafiar o status quo" e transformar a indústria financeira. A organização Schwab CyberSecurity Services (SCS) é a primeira linha de defesa da Schwab. O gerente sênior da equipe de infraestrutura de chave pública (PKI) e criptografia desempenhará um papel fundamental em uma equipe de especialistas e engenheiros do assunto de proteção de dados de segurança cibernética para criar, implementar e manter os controles de PKI e criptografia usando as políticas de segurança, e os padrões de segurança da SAAS e os padrões de segurança.  Você é um líder de pessoas orientadas, com profunda paixão por ser um acelerador e mudar o agente com a capacidade de construir uma comunidade de segurança e a cultura progressiva de Dev/s/OP.  Você tem uma experiência de líder de pessoas na liderança de diversas equipes para gerenciar e implantar ambientes de infraestrutura -chave pública, autoridades de certificação (CA) e manter o ciclo de vida de certificados X.509 em grandes ambientes corporativos.  Além disso, você também levou as equipes a implementar soluções criptográficas por meio de fases de design, implementação e manutenção para proteger sistemas criptográficos, desenvolvendo e aplicando algoritmos complexos, modelos matemáticos e técnicas de criptografia para proteger dados sensíveis de acesso não autorizado, garantindo a integridade e a confidencialidade de dados em uma organização.  Essa função requer experiência na indústria de segurança cibernética. (RAS) e módulos de segurança de hardware (HSMS).

You will be responsible for innovating, developing, and implementing groundbreaking PKI and cryptography capabilities to secure data in on-prem, SaaS, and IaaS workloads.  You have People Leader experience in leading diverse teams to manage and deploy Public Key Infrastructure environments, Certificate Authorities (CA), and in maintaining the lifecycle of X.509 certificates across large corporate enterprise environments.  In addition, you’ve also led teams to implement cryptographic solutions through design, implementation, and maintenance phases to secure cryptographic systems by developing and applying complex algorithms, mathematical models, and encryption techniques to protect sensitive data from unauthorized access, ensuring data integrity and confidentiality within an organization.  This role requires expertise in the cybersecurity industry.

Responsibilities Include, but not Limited to:

• Maintain, lead, and challenge the Public Key Infrastructure (PKI) & Cryptography Team to bring continuous advancement and maturity.
• Lead team and work with partners to architect and deploy PKI infrastructure, including Certificate Authorities (CAs), Registration Authorities (RAs), and Hardware Security Modules (HSMs).
• Gerencie a emissão e gerenciamento de certificados digitais para usuários, servidores e dispositivos em toda a organização. Aplicações. implementações.
• Conduct regular security assessments and audits of PKI systems to identify vulnerabilities and potential risks.
• Work with other IT teams to integrate PKI solutions into existing systems and applications.
• Design and manage key generation, distribution, and rotation processes to maintain the security of cryptographic keys.
• Ensure the team is analyzing existing cryptographic systems to identify potential weaknesses and vulnerabilities, and develop mitigation strategies to address them.
• Ensure adherence to relevant industry standards and regulations (e.g., FIPS 140-2) for cryptographic implementations.
• Realize revisões de segurança de sistemas criptográficos para identificar possíveis vulnerabilidades e fraquezas. Conhecimento de práticas de segurança cibernética, princípios de engenharia de software, estruturas ágeis e envolvimento do cliente. Gerenciamento na segurança cibernética. e capacidade de interagir efetivamente em vários níveis de uma organização e influenciar a liderança (incluindo a tradução de informações técnicas com base em públicos específicos). Princípios da Infraestrutura (PKI). Funções de hash, protocolos de troca de chaves e geração de números aleatórios seguros. CISA)
• Maintain close ties to various stakeholders, developers, and engineers across the company, ensuring the services we create meet their needs as products evolve.
• Communicate extensively with Data Protection Product and engineering teams across the organization.
• Drive complex technical initiatives to full delivery leveraging knowledge of Cyber security practices, software engineering principles, agile frameworks, and customer engagement.
• Lead team to design, build, and maintain infrastructure to meet the organization’s requirements and ensure high availability.
• Applying adept understanding and experience with systems automation platforms and technologies.

What you have

Required:

• 5+ years of people management within cybersecurity.
• 8+ years of hands-on experience in network security, data security, and/or other cybersecurity-related controls and technologies.
• Bachelor’s Degree in computer science or related field highly preferred.
• Ability to foster collaborative, open, working relationships with technology groups and other stakeholders, including vendor relationships.
• Clear communication skills and ability to interact effectively at multiple levels of an organization, and to influence leadership (Including translating technical information based on specific audiences).
• Experience managing multiple high-visibility and high-impact enterprise cybersecurity projects with cross-functional teams while maintaining superior results including planning, development and management of technical requirements, design, testing and deployment of security solutions.
• Strong understanding of cryptography and Public Key Infrastructure (PKI) principles.
• Expertise in PKI technologies like Microsoft Active Directory Certificate Services (AD CS), Entrust, or other commercial PKI solutions.
• Experience with managing Hardware Security Modules (HSMs).
• Extensive knowledge of symmetric and asymmetric encryption algorithms, digital signatures, hashing functions, key exchange protocols, and secure random number generation.

Preferred:

• Experience in Cloud Security within the Financial Services sector.
• Experience with native tooling in Public Cloud offerings as well as third party security controls.
• Multiple certifications in cybersecurity and data protection cybersecurity highly preferred (CISSP, GIAC, CISM, CCSP, CISA)