Lead Encryption Specialist

Job Description: 

Job Summary

•    Role is part of the HSM Centralization and CaaS Enhacement projects, involved in Variant to Key Block migration (mandated as part of PCI DSS commitment), Luna / Payshield HSM firmware upgrades across IDC, Gateway DCs (including HKRS), TMD Device production rollout and operationalization, nCipher to Luna HSM migration for Star Security / SecureX applications, nCipher HSM Decommission. 
•    Furthermore, we’re supporting applications migrating from variant to key block. This process requires the generation of new key block LMK keys for both testing in non-production environments and in production, which again demands on-site presence at the Data Centre. Finally, our planned migration from nCipher to Luna HSM (for SecureX, Star Security pool of HSMs), as well as the decommissioning of nCipher HSMs (for SecureX, Star Security pool of HSMs) in Q4'2027, will require hands-on involvement during both the migration and decommissioning phases 

Key Responsibilities

•    Manages the capabilities within Data Protection service portfolio.
•    Contributes to various Encryption / Key Management initiatives  within the Bank related to Data Protection requirements
•    Would be responsible for integrating Encryption / Key Management services with applications 
•    Excellent collaborator with business teams, infra teams, security operations and offers technical guidance
•    Collaborate with business teams, infra teams, security operations and offers technical guidance
•    Performs security assessments and vulnerability analysis as required to justify risk tolerances and acceptances
•    Makes recommendations to improve maturity of existing tools and capabilities / enable new and advance functionalities
•    Coordinate solution implementation, advisory, problem management, change control and incident response.
•    Documentation of security infrastructure, implementation, operational manuals and developing configurations to meet new business requests
•    Contribute to the Risk and Audit hygiene and governance for the function
•    Provides simple solutions to a variety of complex technical problems.

Motivations
•    Proven ability to identify and develop clear and understandable security capabilities and strategic views from high-level business objectives and technology constraints.
•    A developing knowledge of information security principles, frameworks and best practices and how those principles support the Group's Information & Cyber Security Strategy and Vision.
•    Proven ability to pull a diverse group of individuals with different goals together to facilitate, moderate, and influence productive discussions driving towards results
•    Demonstrated relevant security expertise in designing security solutions for a mix of technology areas, with a focus on application, network and cloud security.

Skills and Experience
Must-have Skills
•    Thales Luna HSM 
•    Thales Payshield HSM
•    Entrust nCipher HSM
Other Skills
•    Thales CipherTrust Manager
•    Fortanix DSM
•    Security Risk Management

Qualifications
Key Experiences
•    A Bachelor's degree in Computer Science/Engineering or related field
•    10-12+ years of progressive Data Protection experience 
•    Minimum 6 – 8 years of strong hands on experience in Encryption and Key Management  and Hardware Security Modules (HSMs)
•    Technical skills in Encryption, Key Management and related topics
•    Proven experience identifying solutions for complex problems in enterprise environments.
•    Proven ability to do research and documentation on emerging trends and how they impact the Group and assigned strategies
•    Strong written and oral communication skills, with the ability to articulate complex technology and decisions simply
•    Knowledge on Post Quantum Cryptography (PQC) initiatives will be advantage
•    End User Technology, Productivity & Collaboration Security
Languages
•    English