Data security consultant

Job Description

Data Security Consultant – 8+ years experience.

Serves as the Subject Matter Expert (SME) and solution architect for cryptography, PKI, and data protection solutions within the Data Protection / Data Security Tower. This role provides end‑to‑end leadership for the design, implementation, compliance, and optimization of encryption and key management frameworks supporting the MSS program.

• Define the enterprise PKI and cryptographic key management strategy, ensuring alignment with MSS objectives and NCA & CST cybersecurity frameworks.
• Lead architecture design for multi‑tier PKI environments leveraging Nokia NCM and NCLM.
• Design, integrate, and maintain Hardware Security Module (HSM) solutions (e.g., Thales) for secure key lifecycle management and high‑availability architectures.
• Oversee Quantum Key Distribution (QKD) evaluation and readiness for next‑generation encryption protocols.
• Ensure policy‑driven governance for key lifecycle management, encryption algorithm selection, and cryptographic resilience.
• Conduct periodic security reviews, audits, and configuration assessments aligned with ISO
  27001, NCA, and CST frameworks.
• Collaborate across Infrastructure, Identity, and Devices Towers to ensure interoperability and unified security posture.
• Lead proof‑of‑concepts for advanced cryptographic technologies and emerging quantum‑resistant encryption standards.
• Provide expert‑level technical direction, mentor teams, and ensure audit readiness for all data protection systems.

8h/5day operational coverage with morning and evening shifts, plus on‑call rotation for P1 and P2 incidents.

• Bachelor's or Master's degree in Cybersecurity, Information Assurance, or Computer Science.
• Minimum 8 years of experience in PKI design, cryptographic architecture, and data protection operations.
• Proven experience implementing HSM‑based key management and integrating PKI across hybrid infrastructures.
• Strong knowledge of cryptographic algorithms, certificate hierarchies, and emerging quantum‑safe technologies.

• Nokia NCM & NCLM Expert Certification.
• Thales Certified Architect or equivalent HSM specialization.
• Advanced security certifications such as CISSP‑ISSAP, CCSP, or ISO
  27001 Lead Implementer.
• Experience with audit and compliance programs under NCA and CST frameworks.

• Nokia NCM
• Nokia NCLM
• Thales HSM
• QKD systems
• Certificate Lifecycle Management Platforms
• Cryptographic Audit Tools

Reports to the Data Protection / Data Security Tower Lead.