Data Security Risk Advisor

We're seeking a highly experienced Data Security Risk Advisor to provide first-line risk leadership across enterprise data protection, encryption, cryptographic controls, and post-quantum readiness initiatives. This role partners closely with security, architecture, cloud, AI, and engineering teams to evaluate risk, challenge assumptions, and help drive informed security decisions across the organization.

Key Responsibilities

• Provide first-line risk oversight for data discovery, classification, protection, encryption, key management, and certificate lifecycle practices.
• Assess data security risks across cloud platforms, applications, analytics environments, endpoints, and emerging AI solutions.
• Identify and evaluate cryptographic dependencies, encryption gaps, certificate risks, and key management weaknesses.
• Develop risk scenarios involving data exfiltration, misuse, corruption, loss, and cryptographic failure.
• Partner with architecture and engineering teams to support crypto-agility strategies and post-quantum cryptography readiness efforts.
• Evaluate technical debt, security exceptions, and control deficiencies based on business criticality and data sensitivity.
• Analyze incidents, recurring issues, and control failures to identify systemic security risks and trends.
• Define meaningful risk indicators and metrics related to encryption, key rotation, certificate exposure, data movement, and transition readiness.
• Communicate findings and recommendations to technical teams, risk leadership, and executive stakeholders.
• Drive accountability by ensuring material risks have clear ownership, decisions, and evidence-based remediation plans.

Required Qualifications

• Extensive experience in Data Security Architecture , Information Protection, or Cybersecurity Risk Management.
• Deep expertise in:
• Encryption technologies
• Cryptography
• Key Management (KMS/HSM)
• Public Key Infrastructure (PKI)
• Certificate Lifecycle Management
• Data Loss Prevention (DLP)
• Strong understanding of cloud data protection and security controls across modern enterprise environments.
• Experience assessing and managing cyber risk from a first-line risk, security architecture, or security advisory perspective.
• Knowledge of cryptographic dependency mapping, crypto-agility, and post-quantum cryptography concepts.
• Ability to connect security risks across data, identity, cloud, privacy, resiliency, and AI domains.
• Strong analytical, communication, and stakeholder management skills.
• Proven ability to influence decisions and drive outcomes without direct ownership of technology delivery.

Preferred Experience

• Experience supporting enterprise cryptographic modernization programs.
• Familiarity with NIST, ISO 27001, and industry security frameworks.
• Exposure to cloud platforms such as AWS, Azure, or Google Cloud.
• Background in financial services, healthcare, or other highly regulated industries.
• Experience assessing emerging security risks related to AI and advanced analytics platforms.