Associate Director Cybersecurity Architecture - Quantum Security

Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology-US (DT-US).

We are curious and life-long learners focused on technology and innovation.

Recruiting for this role ends on 12/7/2026.

Work you'll do

The Associate Director, Quantum Security is a leadership role within DT-US Cyber Risk and Compliance Function with a matrixed relationship to Cyber Operations, Security Architecture, Cyber Design, and Technology and Business leaders across the US Member Firm.

The role is accountable for defining and executing the enterprise quantum-security strategy and leading the multi-year migration to quantum-resistant cryptography across Deloitte's technology environment.

As a key member of the DT-US Cyber Security leadership team, the Associate Director serves as a trusted advisor to executive stakeholders, ensuring Deloitte protects long-lived sensitive data against "harvest now, decrypt later" threats, aligns to NIST and NSA guidance, and builds the cryptographic agility needed to adapt as standards evolve.

The role also serves as Deloitte's senior technical voice with major industry partners and standards communities.

Responsibilities:


* Define and execute the enterprise quantum-security strategy and multi-year PQC migration roadmap aligned to business objectives, regulatory requirements, and enterprise risk appetite.


* Serve as a trusted advisor to executive leadership on quantum risk, regulatory drivers, investment needs, and progress, including briefings to senior leaders and governance forums.


* Lead enterprise cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish crypto-bill-of-materials (CBOM) practices.


* Prioritize systems by data sensitivity, data shelf life, and exposure to harvest-now-decrypt-later attacks and oversee remediation planning and execution.


* Direct design and implementation of NIST-standardized algorithms (ML-KEM, ML-DSA, SLH-DSA) and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.


* Co-Sponsor proof-of-concept testing, performance benchmarking, and interoperability validation, and drive cryptographic agility so algorithms can be replaced without major re-engineering.


* Ensure alignment with NIST guidance (FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, NCCoE publications) and NSA CNSA 2.0 requirements and timelines, along with applicable federal directives and FIPS 140-3 validated module requirements.


* Establish and lead cryptographic governance, including policies, standards, and risk-based decision frameworks, and embed quantum-risk considerations into enterprise risk, third-party risk, procurement, and architectur...