The Encryption Architect is the chief resource responsible for evaluating planning deploying and preparing operations for the tools and systems used by the Data Protection (DP) Team. You will develop roadmaps and set technical direction for the DP team. You will focus on evaluating new technologies/products and supporting systems that are not supported or managed by other teams within the Global Security Organization.
Youll have the opportunity to:
- Provide SME expertise on security tool capabilities and configuration adjustments when needed to contain and implement controls such as encryption key management and database monitoring as applicable
- Collaborate with the Manager to identify capability gaps and operational inconsistencies within the Data Protection controls environment and develop a plan to address them through product enhancement reconfiguration upgrades or process automation
- Ensure build documentation for all security controls is available on the Enterprise cybersecurity WiKi including configuration standards and repeatable processes to support the tools
- Build manage and maintain the automated reporting dashboards systems
- Build manage and maintain the intake process for requests on ServiceNow or a suitable tool
- Define plan and roadmap for dashboard automation and ServiceNow intake process and report weekly progress against plan
- Ensure Technical and Process documentation is 100% current all the time (all changes thoroughly documented)
- Ensure new builds/integrations/agent implementation follow operational readiness processes are documented health/performance KPIs are defined and in place and monitoring and alerting is in place before promoting to production
- Demonstrate progress toward obtaining a securityspecific (or specific security product certification) or maintain a current certification
Qualifications :
Your background:
- 8 years of related work experience
- 5 years experience in operations and maintenance of data protection at an enterprise scale
- 3 years experience architecting and implementing encryption strategies on AWS Azure or Google Cloud including working on CMKs/BYOK and integrating with a thirdparty HSM Provider
- Proficient experience in Thales CipherTrust Thales HSM (Gemalto/SafeNet) and Vormetric Key management is required
- Experience in Certificate Lifecycle Management of all enterprise certificate usage including automation
- Experience in BYOK processes and clientside encryption on cloud platforms such as AWS Azure or Google Cloud
- Experienced in managing and implementing applicationlevel encryption databaselevel encryption and filelevel encryption
- Ability to collaborate and work closely with global teams across different time zones. This role has a regular Monday Friday schedule with the candidate expected to participate in an oncall schedule or work outside of normal work hours when required.
Benefits/Perks:
- Great compensation package and bonus plan
- Core benefits including medical dental vision and matching 401K
- Flexible work environment ability to work remotely hybrid or inoffice
- Flexible time off including volunteer time off vacation sick and 12paid holidays
Additional Information :
Our uniqueness is that we celebrate yours. Experians culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI work/life balance development authenticity engagement collaboration wellness reward & recognition volunteering... the list goes on. Experians people first approach is awardwinning; Great Place To Work in 24 countries FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experians DNA and practices and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work irrespective of their gender ethnicity religion colour sexuality physical ability or age. If you have a disability or special need that requires accommodation please let us know at the earliest opportunity.
Remote Work :
Yes
Employment Type :
Fulltime