Data Security Governance Manager

KeyBank

. Lead and develop a data security governance team responsible for database activity monitoring, centralized encryption key management, certificate lifecycle management, hardware security module support, and encryption and masking governance .

Posted 9/24/2026full-timeBrooklyn • Ohio • United StatesMid-LevelSenior💰 $96,000 - $181,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in data security governance, including database activity monitoring, encryption key management, and certificate lifecycle management. Proven ability to lead cross-functional teams, manage compliance requirements, and drive continuous improvement in data protection practices.

Highest-signal resume keywords

Data Security GovernanceEncryption Key ManagementCertificate Lifecycle ManagementDatabase Activity MonitoringRisk Management Frameworks

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Protection PrinciplesEncryption ConceptsKey ManagementSecurity Control OperationsOperational Metrics DevelopmentGovernance DocumentationAudit CompliancePost-Quantum CryptographyData Loss PreventionSensitive Data Discovery

Soft Skills

Strong Written CommunicationVerbal CommunicationStakeholder InfluenceCross-Functional Initiative ManagementTeam Talent Development

Tools & Technologies

SecuPiMicrosoft PurviewBigIDGoogle Key Management ServicesDigiCertAppViewXAtalla

Certifications & Qualifications

CISSPCISMCISACRISCCDPSE

Industry Keywords

Information SecurityCybersecurityData GovernanceInfrastructure SecurityRegulatory Compliance

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead and develop a data security governance team responsible for database activity monitoring, centralized encryption key management, certificate lifecycle management, hardware security module support, and encryption and masking governance
Direct database activity monitoring capabilities, including alert tuning, detection methodology, monitoring use cases, whitelist governance, session monitoring, deployment support, and production issue resolution
Establish data protection requirements, governance expectations, control considerations, and implementation guidance aligned with enterprise security standards and risk management objectives
Manage centralized encryption key management governance, including key request approvals, lifecycle oversight, key health monitoring, failover planning, automation improvements, and application team support
Oversee certificate lifecycle management, including enrollments, renewals, re-issuances, revocations, expiration monitoring, outage prevention, certificate authority relationships, and industry-standard alignment
Provide governance and operational oversight for hardware security module capabilities, including Atalla support, master key management, security policy configuration, cryptographic key generation, and control procedures
Improve understanding and governance of cryptographic assets, including keys, certificates, services, algorithms, dependencies, ownership, and lifecycle considerations
Drive a post-quantum cryptography readiness program covering inventory, prioritization, stakeholder engagement, governance requirements, migration planning, and capability development
Collaborate with Security Architects to maintain a team capabilities roadmap aligned with enterprise security priorities and future-state data protection needs
Provide oversight for data encryption and masking governance, including field-level encryption, key management requirements, application encryption processes, and control procedures
Partner with Security Engineering, Cyber Defense, Cloud, Infrastructure, application teams, DAO stakeholders, vendors, and business partners on data security controls and remediation
Develop governance procedures, metrics, reporting, and executive-ready updates demonstrating control effectiveness, operational health, risk reduction, and program maturity
Support audit, regulatory, risk, and compliance inquiries with evidence of control design, operating effectiveness, issue remediation, and adherence to internal standards
Drive continuous improvement through automation, process maturity, service reliability, documentation quality, and scalable data security tools and operating models

Requirements

What you’ll need

Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Data Management, or a related field, or equivalent work experience
Experience leading information security, data security, data governance, infrastructure security, or related technology teams
Strong understanding of data protection principles, encryption concepts, certificate management, key management, data security posture management requirements, sensitive data governance, and security control operations
Experience with enterprise security processes, risk management frameworks, audit expectations, control procedures, and regulatory or compliance requirements
Ability to manage cross-functional initiatives, influence stakeholders, prioritize competing demands, and deliver measurable outcomes
Strong written and verbal communication skills, including translating complex security topics into clear business, risk, and executive-level messaging
Experience building or improving operational metrics, governance documentation, procedures, reporting, and service management practices
Preferred: Experience with database activity monitoring, SecuPi, Microsoft Purview, BigID, Google Key Management Services, encryption key services, DigiCert, AppViewX, or hardware security modules such as Atalla
Preferred: Knowledge of certificate lifecycle automation, SSH key management, cryptographic asset inventory, crypto-agility, post-quantum cryptography readiness, data loss prevention, data retention, and sensitive data discovery programs
Preferred: Experience managing security services in a financial services or other regulated environment
Preferred: Professional security or governance certifications such as CISSP, CISM, CISA, CRISC, CDPSE, or similar credentials
Preferred: Experience developing team talent, coaching technical professionals, improving operating models, and leading through ambiguity

Benefits

Comp & perks

Base salary range of $96,000.00–$181,000.00 annually
Eligibility for incentive compensation, which may include production, commission, and/or discretionary incentives
Flexible options in circumstances where roles can be performed effectively in a mobile environment
Reasonable accommodations for qualified individuals with disabilities or disabled veterans