Location:

The ideal candidate for this position has an in-depth knowledge of security and technology, with strong understanding of risk management. The candidate must be able to make decisions based on prior experience in a large enterprise environment and their solid understanding of the technologies and risks involved. Responsibilities may include participating on technology and line of business projects, identifying security risks, analyzing complex security issues, performing risk assessments, providing security requirements and decisions, involvement in third party security reviews and business process reviews. Functional knowledge of both technical and business aspects of security is highly desirable. Effective communication with lines of business and technology groups critical.

• Encryption and data masking support
  • Define requirements for managing cryptographic keys throughout their lifecycle
  • Implement data masking and encryption solutions to protect data at-rest
  • Support the use of encryption solutions by application owners and infrastructure engineering teams
  • Monitor the use, status, and lifecycle events of cryptographic keys to ensure compliance with security standards and regulatory requirements

• Confidential and sensitive data management
  • Define requirements for managing sensitive data throughout its lifecycle
  • Support application and infrastructure teams in managing their confidential and sensitive information securely
  • Collaborate with identity and access management team, security architects and technology engineering teams to establish requirements for securely provisioning, storing, handling and transmitting application secrets

• Track and provide management information on ongoing Information Security initiatives
• Stay on top of industry trends and new technologies to help guide direction and service improvements

Qualifications:

• 3-5 years experience in data protections and cryptography
• Bachelor's degree in computer science, information security or related field; or equivalent work experience
• In depth knowledge of cryptographic algorithms, protocols, and standards (e.g., AES, TLS)
• Experience with managing PKI certificates
• Prefer experience with Microsoft CA, DigiCert, Active Directory and Workspace ONE, certificate enrollment web service & policy web service
• Experience with encryption solution implementation
• Prefer experience with SecuPi, IBM Guardium Data Protection, Thales CipherTrust, SWIFT HSM, Atalla HSM
• Experience with secrets management platforms
• Prefer experience with CyberArk, HashiCorp Vault, Google Secrets Manager, Azure Private Vault

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $85,000 to $100,000 annually depending on job-related factors such as level of experience. Compensation for this role also includes eligibility for short-term incentive compensation and deferred incentive compensation subject to individual and company performance. Please click for a list of benefits for which this position is eligible.

Please click for a list of benefits for which this position is eligible.

Key has implemented a role-based Mobile by Design approach to our employee workspaces, dedicating space to those whose roles require specific workspaces, while providing flexible options for roles which are less dependent on assigned workspaces and can be performed effectively in a mobile environment. As a result, this role may be Mobile or Home-based, which means you may work primarily either at a home office or in a Key facility to perform your job duties.

KeyCorp is an Equal Opportunity and Affirmative Action Employer committed to building a diverse, equitable and inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other protected category.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing .

#LI-Remote