Communications Security (COMSEC) Manager
Summary
Owns the full lifecycle of the organization's cryptographic material and secure communications: defining crypto policy, managing keys and HSMs/key management systems, acting as COMSEC custodian, plus compliance, incident response, and staff training. Requires 5+ years in infosec, including 3 in communications security.
Summary
The COMSEC Manager protects the confidentiality, integrity and authenticity of the organization's communications and owns the full lifecycle of its cryptographic material.
Main Responsibilities
Define and maintain the cryptographic policy: approved algorithms, key lengths, cryptoperiods and protocols.
Manage the full lifecycle of cryptographic keys and keying material: generation, registration, distribution, storage, rotation, revocation, archiving and destruction.
Oversee cryptographic hardware and software, including hardware security modules (HSMs) and key management systems.
Act as COMSEC custodian and maintain an accurate, auditable inventory of COMSEC assets.
Design and validate secure communications architecture for voice, data, and networks.
Ensure compliance with internal security policies and applicable laws.
Manage incident response and risk mitigation for COMSEC-related incidents.
Develop and deliver COMSEC training for staff.
Key Requirements
Bachelor's or Master's degree in cybersecurity, information security, or a related field.
At least 5 years of experience in information security, including 3 in communications security.
In-depth knowledge of encryption algorithms (AES, RSA, elliptic curve).
Hands-on experience with HSMs and key management systems.
Strong understanding of ISO/IEC 27001 and NIST frameworks.
Fluent written and spoken English.
Nice to Have
Experience in financial services, telecommunications, or government.
CISSP, CISM, CompTIA Security+, or ISO/IEC 27001 certifications.
Experience with cloud key management services.
Other Details
Location: International. Team Structure: COMSEC team.