Job Information

TIAA Cyber Encryption Key Governance Manager in Broomfield, Colorado

The Cyber Encryption Key Governance Manager role is responsible for leading and growing a team of professionals to support the TIAA public key infrastructure (PKI) and certificate lifecycle management services. These services span both on-premise and cloud environments to provide coverage for the enterprise globally. This position will create and maintain our governance program, define our machine identity management strategy, provide operational support, and ensure compliance with industry best practices and standards. In addition, this role will be expected to assist with working with various partners to build and implement new security controls.

Key Responsibilities and Duties

  • Administer within our certificate lifecycle management platform

  • Govern our private key infrastructure

  • Provide governance model to ensure adherence to key management, encryption, and authentication standards

  • Apply encryption principles to new use cases

  • Design, build, and support machine identity management program inclusive of mutual authentication, and device authentication

  • Assist with certificate discovery and onboarding of applications

  • Training new team members in tools, concepts, and processes


Educational Requirements

  • University (Degree) Preferred

Work Experience

  • 5 Years Required; 7 Years Preferred

Physical Requirements

  • Physical Requirements: Sedentary Work

Career Level


Required Qualifications

  • 5 or more years of experience within Cybersecurity

  • 3 or more years of experience with certificate life cycle management tool (CLM) (Ex. Venafi, AppviewX, Keyfactor, etc)

  • 3 or more years of experience with Hardware security modules (HSM) (Ex. Thales, Entrust, Fortanix, etc)

  • 2 or more years of experience managing a Public Key Infrastructure (PKI) environment

Preferred Qualifications

  • Experience with Venafi TLS Protect

  • Experience in leading teams

  • Experience with vulnerability management scanning tools

  • CISSP or CISA preferred

  • Working knowledge of encryption at rest, in motion, and in use


Base Pay Range: $111,600/yr. - $185,900/yr.

Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).Â

Company Overview

TIAA is the leading provider of financial services in the academic, research, medical, cultural and government fields. We offer a wide range of financial solutions, including investing, banking, advice and education, and retirement services.

Benefits and Total Rewards

The organization is committed to making financial well-being possible for its clients, and is equally committed to the well-being of our associates. That’s why we offer a comprehensive Total Rewards package designed to make a positive difference in the lives of our associates and their loved ones. Our benefits include a superior retirement program and highly competitive health, wellness and work life offerings that can help you achieve and maintain your best possible physical, emotional and financial well-being. To learn more about your benefits, please review our Benefits Summary ( .

Equal Opportunity

We are an Equal Opportunity/Affirmative Action Employer. We consider all qualified applicants for employment regardless of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other protected status.

Read more about the Equal Opportunity Law here ( .

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.Â

If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:Â

Phone: (800) 842-2755


Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here ( .

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here ( .

For Applicants of Nuveen residing in Europe and APAC, please click here ( .

For Applicants of Greenwood residing in Brazil (English), click here ( .

For Applicants of Greenwood residing in Brazil (Portuguese), click here ( .Â

For Applicants of Westchester residing in Brazil (English), click here ( .

For Applicants of Westchester residing in Brazil (Portuguese), click here ( .Â

TIAA started out over 100 years ago to help ensure teachers could retire with dignity. Today, many people who work at not-for-profits rely on our wide range of financial products and services to support and strengthen their financial well-being.