Certificate Management Leader

The Enterprise-wide Certificate Management Leader is responsible for establishing and leading Marsh's centralized Certificate Management Office (CMO). This role ensures robust governance, lifecycle management, and operational excellence of all digital certificates across the enterprise. The Lead will develop and implement strategy, policy, standards, automation, and cross-functional coordination to build a scalable, accountable, and standardized certificate management practice.

The role requires proven and capable leadership to manage direct reports and matrix teams, working collaboratively across business and technology domains to mitigate certificate-related risks, ensure compliance, and enable secure digital operations.

• Develop and implement an enterprise-wide certificate management strategy and governance framework.
• Serve as the accountable owner for certificate lifecycle management, policy enforcement, and operational execution.
• Chair/facilitate and coordinate governance councils, steering committees, and working groups to ensure cross-functional alignment and execution.

• Own the certificate management strategy, roadmap, and continuous improvement initiatives.
• Advocate for and coordinate funding, tooling, and prioritization decisions in collaboration with senior leadership.
• Deliver executive reporting on certificate risk, outages, compliance posture, and program status.

• Oversee the definition and enforcement of certificate policies aligned with industry standards (e.g., NIST, CA/Browser Forum).
• Ensure compliance tracking, audit readiness, and management of policy exceptions.
• Translate policy into technical standards and reusable templates for consistent implementation across environments.

• Guide the design and maintenance of PKI architecture and trust models.
• Lead and coordinate automation initiatives to integrate certificate management platforms (e.g., Hashi Corp Vault, Venafi) and reduce manual processes.
• Serve as the technical authority and advisor on complex certificate scenarios and future-proofing cryptographic approaches.

• Oversee certificate issuance, renewal, revocation, and incident response coordination.
• Maintain centralized certificate inventory and visibility across all domains.
• Implement monitoring and alerting mechanisms for certificate expirations and unknown certificates.

• Manage a team of direct reports including Certificate Program Manager, Policy & Compliance Lead, Standards & Architecture Lead, PKI Architect, Automation & Platform Lead, Certificate Operations Coordinator, and Discovery & Monitoring Lead.
• Foster a collaborative matrix reporting environment to ensure domain teams execute certificate management responsibilities effectively.
• Foster a culture of accountability, standardization, and continuous improvement within the CMO and across Marsh.

• Demonstrated experience in enterprise-wide certificate management, PKI architecture, and digital security.
• Proven ability to lead, with experience managing cross-functional teams and matrix reporting structures.
• Deep understanding of certificate lifecycle management, cryptographic standards, and compliance frameworks (NIST, CA/Browser Forum).
• Expertise in automation tools and platforms such as Venafi, Hashi Corp Vault, ACME protocols, and API integrations.
• Excellent communication and stakeholder management skills, capable of engaging with senior leadership and technical teams.
• Ability to develop and enforce policies, standards, and governance frameworks.
• Demonstrated analytical and problem‑solving skills and ability to manage incident response related to certificate issues.

Marsh is committed to embracing a diverse, inclusive, and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

In accordance with the Accessibility for Ontarians with Disabilities Act, 2005, Marsh will provide a reasonable accommodation to employees and prospective employees to the point of undue hardship upon request and as required in respect of the individual's particular restrictions and limitations. If you require a specific accommodation because of a disability or medical need, please contact reaso