Summary
D360 Bank is seeking a Cryptography Engineer in Riyadh to support the design, implementation, and daily operation of cryptographic key management processes. The role maintains key management systems and supports key lifecycle controls, encryption and signing integrations, monitoring, incident response, documentation, audits, and risk reviews. Applicants are expected to have 3 to 5 years of relevant experience and hands-on knowledge of HSMs, PKI, key vaults, cloud key management, and security standards. A recognized degree and industry certifications such as CISSP, CISM, CKA, or CCSP are preferred.
The posting
As published on d360.com. Pulled from the employer's site and shown as they wrote it.
The role is responsible to Support the design, implementation, and daily operations of cryptographic key management processes. Assist in ensuring keys and cryptographic systems are securely maintained, compliant with standards, and aligned with organizational security requirements
Responsibilities
- Manage and maintain key management systems (e.g., HSMs, key vaults, cloud KMS).
- Support the implementation of the enterprise key management strategy.
- Follow policies and procedures for the cryptographic key lifecycle (generation, storage, rotation, and revocation).
- Ensure encryption and signing services are properly integrated with applications and infrastructure.
- Ensure activities are compliance by preparing documentation and assisting in audits and reviews.
- Maintain records of configurations, processes, and key management activities.
- Monitor key management systems and report any anomalies or issues.
- Assist in investigating and resolving key-related incidents.
- Participate in periodic key usage reviews and risk assessments.
- Work with engineering, DevOps, and infrastructure teams to support implementation of cryptographic controls.
- Follow guidance on secure algorithms and best practices when implementing cryptographic solutions.
- Help promote awareness of key management and cryptography practices within the team.
- Carry out assigned tasks related to cryptographic operations and security controls.
- Perform any other duties assigned to by line manager related to the nature of the work.
- Enforce, incorporate, and comply with all necessary controls and related information security policies, procedures, practices, training, reporting, personal due diligence, and vigilance, within departmental/unit activities and operations.
Qualifications
Preferred Qualifications
- A tertiary-level qualification from an internationally recognized institution
- Industry-recognized certifications such as CISSP, CISM, CKA, CCSP, or equivalent.
Years & Nature of Experience
- Recommended 3 to 5 years of equivalent experience in Computer Science, Information Security, Engineering, or a related field.
- Proven experience as a Cryptographic Key Management lead, Security Manager, or Security Architect with a focus on encryption/key lifecycle.
- Strong knowledge of cryptographic principles, algorithms (AES, RSA, ECC, etc.), and secure key storage.
- Hands‑on experience with HSMs, PKI, key vaults, cloud key management services, and encryption tooling.
- Familiarity with security standards and compliance requirements (e.g., NIST, ISO, PCI‑DSS, FIPS).
- Experience leading technical teams and delivering secure solutions at scale.
- Excellent communication and stakeholder management skills.
Technical Competencies
- Cryptography & Key Management
- Security Architecture
- Incident Response
- Risk Management
Behavioural Competencies
- Analytical Thinking
- Complex Reasoning
- Communication
- Trust & Transparency