Associate Director Cybersecurity Architecture - Quantum Security

Lead Deloitte’s enterprise quantum-security architecture and PQC migration planning for regulated, business-critical environments.

Responsibilities

• Define and execute the enterprise quantum-security strategy and a multi-year PQC migration roadmap aligned to business objectives, regulatory requirements, and enterprise risk appetite.
• Advise executive leadership on quantum risk, regulatory drivers, investment needs, and migration progress through senior-leader briefings and governance forums.
• Own enterprise cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish crypto-bill-of-materials (CBOM) practices.
• Prioritize remediation by data sensitivity, data shelf life, and exposure to harvest-now-decrypt-later attacks; oversee remediation planning and execution.
• Direct design and implementation of NIST-standardized PQC algorithms and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.
• Co-sponsor proof-of-concept testing, performance benchmarking, and interoperability validation; drive cryptographic agility to support algorithm replacement with minimal re-engineering.
• Ensure program alignment with NIST guidance including FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE publications, plus NSA CNSA 2.0 timelines and applicable federal directives and FIPS 140-3 validated module requirements.
• Establish and lead cryptographic governance including policies, standards, and risk-based decision frameworks; embed quantum-risk considerations into enterprise risk, third-party risk, procurement, and architecture review processes.
• Act as a liaison to major technology vendors, cloud providers, and HSM and PKI vendors; evaluate vendor roadmaps and hold suppliers accountable for PQC readiness in contracts.
• Represent Deloitte in industry working groups and standards forums, including NIST NCCoE, PQC Alliance, and sector ISACs; engage clients and regulators as a thought leader.
• Manage the program budget, resourcing, and delivery milestones to support risk reduction, regulatory compliance, and business priorities.
• Lead and develop a team of cryptography, PKI, and security architecture professionals; build organizational quantum-security competency through training, reference architectures, and playbooks.

Requirements

• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor and provide clear guidance to others.
• Bachelor’s degree (or equivalent) in Information Technology, Computer Science, or Engineering.
• Minimum 10 years of experience in cybersecurity, including experience defining and executing enterprise security or cryptographic strategies aligned to business objectives, regulatory requirements, and risk appetite.
• Minimum 4 years supporting highly regulated environments (federal, defense, audit and financial services, or critical infrastructure).
• Minimum 2 years of people and/or process management experience.
• Ability to travel 10% on average.
• Must be legally authorized to work in the United States without employer sponsorship.

Preferred

• Advanced degree (master’s or higher) in Information Security, Computer Science, Mathematics, Engineering, or related field.
• Strong working knowledge of post-quantum cryptography and migration challenges (key and signature sizes, performance, hybrid modes).
• Deep knowledge of standards and guidance, including NIST FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE migration publications.
• Deep knowledge of NSA CNSA 2.0, NSM-10, and OMB M-23-02.
• Deep understanding of FIPS 140-3 / CMVP, Zero Trust architecture, and federal mandates.
• Deep understanding of PKI, TLS, key management, HSMs, and secure software and firmware signing.
• Experience leading an enterprise cryptographic inventory or large-scale crypto-migration program.
• Proven ability to influence senior stakeholders and drive enterprise-wide change in matrixed environments; translate technical risk into business terms.
• Experience engaging vendors, industry consortia, and standards bodies; record of speaking, publishing, or standards participation preferred.
• Industry certifications such as CISSP, CISM, CCSP, CISA, GIAC, or equivalent experience.

Technologies

• ML-KEM, ML-DSA, SLH-DSA
• TLS, VPN
• PKI, IoT/OT, CBOM (crypto-bill-of-materials), HSMs
• NIST FIPS 203, NIST FIPS 204, NIST FIPS 205
• FN-DSA, NIST IR 8547, SP 800-208
• NSA CNSA 2.0, FIPS 140-3, NCCoE
• Zero Trust architecture, CMVP, NSM-10, OMB M-23-02
• PKI and certificate management, code signing, key management, firmware signing

Location

• Mechanicsburg, PA (onsite)

Compensation

• USD 137,400 - 282,100 per yearly
• Eligible for a discretionary annual incentive program (subject to rules)