{"id":1622132,"url":"https://alion.io/job/key-com-data-security-governance-manager","title":"Data Security Governance Manager","company":{"id":450627,"name":"KeyBank","domain":"key.com","url":"https://alion.io/company/key-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":18,"ghost_share":0,"stale_share":0.889,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":96000,"max":181000,"currency":"USD","period":"year","gross":null,"usd_annual":181000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DAO","optional":false}],"status":"live","first_seen_at":"2026-09-24T00:00:00Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-12T08:19:17Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"Location:\n4910 Tiedeman Road, Brooklyn OhioJob Summary\nThe Data Security Governance Manager will lead a team responsible for protecting KeyBank and client data through enterprise data security governance, monitoring, encryption, certificate management, key management, cryptographic asset awareness, and data protection controls. This role provides leadership across data security functions aligned to internal IT standards, operational control procedures, regulatory expectations, and enterprise risk management objectives. The Senior Manager will guide daily operations, mature governance processes, partner with technology and business teams, and drive a program to understand the organization’s cryptographic assets and prepare key services, processes, and stakeholders for post-quantum cryptography readiness.\nPrimary Responsibilities\nLead and develop a data security governance team responsible for database activity monitoring, centralized encryption key management, certificate lifecycle management, hardware security module support, and encryption and masking governance.\nProvide direction for database activity monitoring capabilities, including alert tuning, detection methodology development, monitoring use cases, whitelist governance, session monitoring, deployment support, and production issue resolution.\nSupport teams responsible for data security posture management by helping establish data protection requirements, governance expectations, control considerations, and implementation guidance that align with enterprise security standards and risk management objectives.\nManage centralized encryption key management governance, including review and approval of key requests, lifecycle oversight, key health monitoring, failover planning, automation improvements, and support for application teams.\nOversee certificate lifecycle management processes, including certificate enrollments, renewals, re-issuances, revocations, expiration monitoring, outage prevention, certificate authority relationships, and alignment to industry standards.\nProvide governance and operational oversight for hardware security module capabilities, including Atalla support, master key management, security policy configuration, cryptographic key generation, and related control procedures.\nLead efforts to improve understanding of the organization’s cryptographic assets, including keys, certificates, cryptographic services, algorithms, dependencies, ownership, and lifecycle considerations needed to support risk-based planning and governance.\nDrive a post-quantum cryptography readiness program by coordinating inventory, prioritization, stakeholder engagement, governance requirements, migration planning, and capabilities needed to prepare key services and cryptographic processes for future quantum-resistant standards.\nCollaborate closely with Security Architects to develop and maintain a capabilities roadmap for the team, ensuring governance processes, services, and tooling continue to align with enterprise security priorities and future-state data protection needs.\nProvide direction and oversight for data encryption and masking governance, including field-level encryption, key management requirements, application encryption processes, and related control procedure execution.\nPartner with Security Engineering, Cyber Defense, Cloud, Infrastructure, application teams, DAO stakeholders, vendors, and business partners to drive effective delivery of data security controls and remediation activities.\nDevelop and maintain governance procedures, metrics, reporting, and executive-ready updates that demonstrate control effectiveness, operational health, risk reduction, and program maturity.\nSupport audit, regulatory, risk, and compliance inquiries by providing clear evidence of control design, operating effectiveness, issue remediation, and adherence to internal standards.\nDrive continuous improvement through automation, process maturity, service reliability, documentation quality, and adoption of scalable data security tools and operating models.\nRequired Qualifications\nBachelor’s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Data Management, or a related field, or equivalent work experience.\nExperience leading information security, data security, data governance, infrastructure security, or related technology teams.\nStrong understanding of data protection principles, encryption concepts, certificate management, key management, data security posture management requirements, sensitive data governance, and security control operations.\nExperience working with enterprise security processes, risk management frameworks, audit expectations, control procedures, and regulatory or compliance requirements.\nDemonstrated ability to manage cross-functional initiatives, influence stakeholders, prioritize competing demands, and deliver measurable outcomes.\nStrong written and verbal communication skills, including the ability to translate complex security topics into clear business, risk, and executive-level messaging.\nExperience building or improving operational metrics, governance documentation, procedures, reporting, and service management practices.\nPreferred Qualifications\nExperience with database activity monitoring, SecuPi, Microsoft Purview, BigID, Google Key Management Services, encryption key services, DigiCert, AppViewX, or hardware security modules such as Atalla.\nKnowledge of certificate lifecycle automation, SSH key management, cryptographic asset inventory, crypto-agility, post-quantum cryptography readiness, data loss prevention, data retention, and sensitive data discovery programs.\nExperience managing security services in a financial services or other regulated environment.\nProfessional security or governance certifications such as CISSP, CISM, CISA, CRISC, CDPSE, or similar credentials.\nExperience developing team talent, coaching technical professionals, improving operating models, and leading through ambiguity.\nKey Competencies\nLeadership and talent development\nRisk-based decision making\nData security governance and control discipline\nCryptographic asset management and post-quantum cryptography readiness leadership\nOperational execution and service reliability\nStakeholder management and cross-functional collaboration\nExecutive communication and reporting\nContinuous improvement and automation mindset\nMeasures of Success\nData security services are delivered reliably, with clear ownership, documented procedures, and measurable operational health.\nDatabase monitoring, certificate, encryption, key management, and HSM processes reduce risk and prevent avoidable control gaps or service disruptions.\nCryptographic assets are better understood, governed, and prioritized through an evolving inventory, ownership model, and roadmap that supports post-quantum cryptography readiness.\nGovernance processes provide timely guidance, approvals, escalation, remediation support, and evidence for audit and compliance needs.\nMetrics and reporting clearly communicate sensitive data protection posture, control effectiveness, and program maturity.\nThe team continues to mature through improved automation, stronger documentation, effective stakeholder engagement, and ongoing talent development.\nCOMPENSATION AND BENEFITS\nThis position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.\nKey has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.\nJob Posting Expiration Date: 10/30/2026\n\nKeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing .\n#LI-Remote","description_format":"text","description_chars":8622,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Financial Services","Professional Services","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-10-01T20:48:19Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.571,"p_room":0.75,"age_days":18,"expected_fill_days":25,"reasons":["conf:3","stale_co","velocity","win:late","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":181000,"is_top_pay":true},"html_url":"https://alion.io/job/key-com-data-security-governance-manager","json_url":"https://alion.io/job/key-com-data-security-governance-manager.json","meta":{"generated_at":"2026-10-12T09:05:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13613,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450627},"rest":"https://alion.io/mcp/rest/get_company?id=450627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkey-com-data-security-governance-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkey-com-data-security-governance-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkey-com-data-security-governance-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/key-com-data-security-governance-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkey-com-data-security-governance-manager"}]}