Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews and other regulatory reviews, including access records, change records and vulnerability remediation records.
Set up, improve, and streamline certificate and key management operational processes (issuance, renewal, revocation, discovery, rotation, escrow) for continuous improvement and to eliminate outage risk from expiry.
Work closely with IT Security Architects (Cryptography and PKI), implementation partners (CLM, EKMS), CA/PKI operators, and application owners to implement and operationalize certificate and key management solutions using best-of-breed technology and methodology.
Track the latest attack-and-defense trends in the industry, distill best-practice playbooks, and apply insights to strategy and product iterations to stay ahead of emerging risks.
Collect and maintain technical control evidence for ISO 27001, SOC 2, MAS TRM-aligned reviews and other regulatory reviews, including access records, change records and vulnerability remediation records.