HAYS

Stanowisko:

Head of Cryptography

Lokalizacja:

Kraków/ Warszawa

małopolskie

Opis stanowiska podany przez pracodawcę:

Head of Cryptography
Kraków/Warszawa
NR REF.: 1190832

Global Defense Engineering is responsible for fielding solutions that help defend the company against a wide range of threats to the business as well as its customers, clients, partners, and staff. The team works in concert, with partner teams across the company, to implement novel defensive capabilities that are effective and adaptable against a constantly evolving threat landscape.

Your new role

Lead the design and architecture of the bank’s PKI systems, ensuring they meet security requirements, industry standards, and compliance regulations.
Develop and maintain PKI policies, standards, and procedures, including certificate lifecycle management, key management, and incident response.
Ensure PKI solutions follow industry regulations (e.g., PCI-DSS, GDPR, RFC 3647) and internal security policies.
Conduct regular audits of PKI systems to identify vulnerabilities and ensure compliance with security standards.
Collaborate with IT, legal, compliance, and risk management teams to align PKI strategies with overall business aims and regulatory requirements.

What you39ll need to succeed

Bachelor39s or Master’s degree in Computer Science, Information Security, or a related field. Directly related work experience may be substituted for a degree.
Demonstrated experience in information security, with a focus on PKI and cryptographic services.
Proven experience in designing, implementing, and managing PKI solutions in a large organization, preferably within the financial sector or aerospace/defense industry.
Experience with HSMs, certificate authorities, and PKI-related protocols (e.g., X.509, SSL/TLS, OCSP, SCEP).
Strong understanding of cryptographic principles, algorithms, and protocols.
Proficiency in managing PKI tools and platforms such as Microsoft CA, OpenSSL, Keyfactor Command and Venafi.
Experience with cloud-based PKI solutions and integration with cloud services (e.g., AWS, Azure).
Familiarity with regulatory requirements and standards related to PKI and information security.
Effective communication skills, with the ability to convey complex technical concepts to non-technical stakeholders.

What you39ll get in return