Senior Controls SME – Cryptography

This role is part of a global cybersecurity function responsible for protecting critical systems, data, and services at scale. It supports the design, implementation, and continuous improvement of cryptography-related controls across a complex enterprise environment.

• Technical background in IT, cybersecurity, or related field (cryptography knowledge is a strong plus or willingness to learn quickly)
• Experience in risk, controls, governance, or cybersecurity environments
• Strong communication skills – ability to explain complex technical concepts to non-technical stakeholders
• Proven stakeholder management experience, including working with senior audiences
• Ability to work across cross-functional teams and drive alignment
• Strong analytical and problem-solving skills, especially in governance and process improvement

Risk & Controls Management:

• Maintain alignment of cryptography controls with the enterprise risk framework
• Assess control effectiveness and support remediation plans

Controls Governance:

• Review and update control documentation, processes, and governance artefacts
• Support control lifecycle activities including assessments and issue management

Continuous Monitoring:

• Evaluate and enhance monitoring processes and control effectiveness metrics
• Collaborate with control owners to ensure controls remain fit for purpose

Stakeholder Management:

• Act as a key point of contact for internal stakeholders including security, audit, and risk teams
• Respond to queries, reviews, and regulatory challenges
• Translate complex technical topics into clear, business-friendly communication

Reporting & Compliance:

• Manage and improve performance metrics (e.g. KCIs, risk indicators)
• Ensure alignment with regulatory standards and industry best practices

Cross-Team Collaboration:

• Work closely with cybersecurity, engineering, and business teams
• Drive knowledge sharing and alignment across control domains

Training & Awareness:

• Support the development of training materials and awareness initiatives related to cryptography controls