Communications Security (COMSEC) Manager

Summary

The COMSEC Manager protects the confidentiality, integrity and authenticity of the organization's communications and owns the full lifecycle of its cryptographic material.

Main Responsibilities

• Define and maintain the cryptographic policy: approved algorithms, key lengths, cryptoperiods and protocols.
• Manage the full lifecycle of cryptographic keys and keying material: generation, registration, distribution, storage, rotation, revocation, archiving and destruction.
• Oversee cryptographic hardware and software, including hardware security modules (HSMs) and key management systems.
• Act as COMSEC custodian and maintain an accurate, auditable inventory of COMSEC assets.
• Design and validate secure communications architecture for voice, data, and networks.
• Ensure compliance with internal security policies and applicable laws.
• Manage incident response and risk mitigation for COMSEC-related incidents.
• Develop and deliver COMSEC training for staff.

Key Requirements

• Bachelor's or Master's degree in cybersecurity, information security, or a related field.
• At least 5 years of experience in information security, including 3 in communications security.
• In-depth knowledge of encryption algorithms (AES, RSA, elliptic curve).
• Hands-on experience with HSMs and key management systems.
• Strong understanding of ISO/IEC 27001 and NIST frameworks.
• Fluent written and spoken English.

Nice to Have

• Experience in financial services, telecommunications, or government.
• CISSP, CISM, CompTIA Security+, or ISO/IEC 27001 certifications.
• Experience with cloud key management services.

Other Details

Location: International. Team Structure: COMSEC team.