Job Description

Title: Cryptography PKI Engineer

Location: Nashville TN – onsite only

Duration: Full Time

Job Summary:

We are seeking a highly competent and visionary Senior Information Security Specialist to join our Enterprise Key Management Organization and contribute to the success of our technology compliance initiatives. This role will play a central governance and oversight authority in cryptographic key management activities, ensuring the security of cryptographic keys and systems throughout their lifecycle. The Specialist will be responsible for maintaining compliance with company, industry, and regulatory requirements related to cryptographic key management. In addition, this role may involve some on-call rotation and implementation projects that may require work outside of normal working hours.

Responsibilities:

• Document security policies and procedures, ensuring comprehensive coverage of security-related activities and requirements.
• Support risk assessment and data security procedures and products by providing implementation support and ensuring their effectiveness.
• Evaluate new and proposed security systems and technologies, staying updated with industry advancements and best practices.
• Collaborate with the Enterprise Key Management Organization to maintain the security of cryptographic keys and systems.
• Monitor and document key management lifecycle events in accordance with internal policies, Elavon, and industry regulations.
• Work closely with cross-functional teams to ensure compliance with company and industry requirements related to cryptographic key management.
• Participate as Subject Matter Expert in internal and external compliance audits.
• Coordinate and perform as required, internal team QA and QCP processes. 
• SME on industry and regulatory requirements for cryptographic key and PIN management. (I.e. NIST, FIPS, PCI PIN, PCI DSS, PCI P2PE, etc.).
• Participate in on-call rotations and implementation projects that may involve work outside normal working hours.

͏

Do

• Ensuring customer centricity by providing apt cybersecurity 

• Monitoring and safeguarding the log sources and security access
• Planning for disaster recovery in the event of any security breaches
• Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
• Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
• Conduct security assessments, risk analysis and root cause analysis of security incidents
• Handling incidents escalated by the L1 team in 24x7 rotational shifts
• Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
• Completing all tactical security operations tasks associated with this engagement.
• Analyses all the attacks and come up with remedial attack analysis
• Conduct detailed analysis of incidents and create reports and dashboards

• Stakeholder coordination & audit assistance

• Liaise with stakeholders in relation to cyber security issues and provide future recommendations
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Advice and guidance to employees on issues such as spam and unwanted or malicious emails

͏

Deliver

͏

͏