Cyber Data Protection/PKI Manager

Experteer Overview In this role, you will lead strategic data protection and encryption initiatives for clients, shaping PKI adoption across cloud and on-premises environments. You’ll design and deploy data security solutions, monitor progress, and guide teams to secure on-time, on-budget outcomes. You’ll stay ahead of encryption trends and recommend tools to strengthen client security. This positions you at the intersection of technology, governance, and client advisory within Deloitte’s Cyber Strategy & Transformation practice. Compensation / Benefits * Act as SME and trusted advisor on data protection and encryption requirements, including new risks * Advise on encryption, decryption, secure key management, and PKI strategies across cloud, on-premises, and hybrid environments * Design, implement, and operate data risk reduction solutions (certificate lifecycle management, infrastructure monitoring, deployment) * Drive engagement execution, communicate with clients and Deloitte leadership, support delivery teams, manage timelines for delivery * Stay current on encryption technologies and industry trends, assess and recommend tools and solutions Tasks * 7+ years in data protection and information security (Data Discovery, Classification, Rights Management, DLP, Cloud Security, Encryption, Certificate Lifecycle Management, SaaS Security) * 7+ years PKI architecture experience and enterprise trust models * 5+ years leading Certificate Lifecycle Management strategies using platforms such as AppViewX, Venafi, Keyfactor, DigiCert or similar * Advanced cryptography knowledge; certificate lifecycle, key management, HSM integration, crypto policy enforcement * Ability to define target-state architecture and operating models for large-scale environments * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, web/app servers, and network/security infrastructure * Experience leading discovery, inventory rationalization, remediation, renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, workshop facilitation, and roadmap alignment * Ability to lead technical workstreams and manage onshore/offshore teams * Ability to translate business/security requirements into architecture blueprints and implementation plans * Understanding of delivery governance, risk management, dependencies, and QA for enterprise security transformations * Willingness to travel 25-50% Key requirements *

within support delivery teams, manage timelines for delivery * Stay current on encryption technologies and industry trends, assess and recommend tools and solutions Tasks * 7+ years in data protection and information security (Data Discovery, Classification, Rights Management, DLP, Cloud Security, Encryption, Certificate Lifecycle Management, SaaS Security) * 7+ years PKI architecture experience and enterprise trust models * 5+ years leading Certificate Lifecycle Management strategies using platforms such as AppViewX, Venafi, Keyfactor, DigiCert or similar * Advanced cryptography knowledge; certificate lifecycle, key management, HSM integration, crypto policy enforcement * Ability to define target-state architecture and operating models for large-scale environments * Hands-on experience with certificate automation across load balancers, WAFs, API gateways, Kubernetes, cloud, web/app servers, and network/security infrastructure * Experience leading discovery, inventory rationalization, aaaaaa Advise renewal automation, and compliance monitoring programs * Strong client leadership, executive stakeholder management, workshop facilitation, and roadmap alignment * Ability to lead technical workstreams and manage onshore/offshore teams * Ability to translate business/security requirements into architecture blueprints and implementation plans * Understanding of delivery governance, risk management, dependencies, and QA for enterprise security transformations * Willingness to travel 25-50% Key requirements *