Communications Security (COMSEC) Manager

Summary

The COMSEC Manager protects the confidentiality, integrity and authenticity of the organization's communications and owns the full lifecycle of its cryptographic material.

Main Responsibilities

• Define and maintain the cryptographic policy: approved algorithms, key lengths, cryptoperiods and protocols.

• Manage the full lifecycle of cryptographic keys and keying material: generation, registration, distribution, storage, rotation, revocation, archiving and destruction.

• Oversee cryptographic hardware and software, including hardware security modules (HSMs) and key management systems.

• Act as COMSEC custodian and maintain an accurate, auditable inventory of COMSEC assets.

• Design and validate secure communications architecture for voice, data, and networks.

• Ensure compliance with internal security policies and applicable laws.

• Manage incident response and risk mitigation for COMSEC-related incidents.

• Develop and deliver COMSEC training for staff.

Key Requirements

• Bachelor's or Master's degree in cybersecurity, information security, or a related field.

• At least 5 years of experience in information security, including 3 in communications security.

• In-depth knowledge of encryption algorithms (AES, RSA, elliptic curve).

• Hands-on experience with HSMs and key management systems.

• Strong understanding of ISO/IEC 27001 and NIST frameworks.

• Fluent written and spoken English.

Nice to Have

• Experience in financial services, telecommunications, or government.

• CISSP, CISM, CompTIA Security+, or ISO/IEC 27001 certifications.

• Experience with cloud key management services.

Other Details

Location: International. Team Structure: COMSEC team.