Associate Director Cybersecurity Architecture - Quantum Security

Position Summary Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology-US (DT-US). We are curious and life-long learners focused on technology and innovation. Recruiting for this role ends on 12/7/2026. Work you’ll do The Associate Director, Quantum Security is a leadership role within DT-US Cyber Risk and Compliance Function with a matrixed relationship to Cyber Operations, Security Architecture, Cyber Design, and Technology and Business leaders across the US Member Firm. The role is accountable for defining and executing the enterprise quantum-security strategy and leading the multi-year migration to quantum-resistant cryptography across Deloitte's technology environment. As a key member of the DT-US Cyber Security leadership team, the Associate Director serves as a trusted advisor to executive stakeholders, ensuring Deloitte protects long-lived sensitive data against "harvest now, decrypt later" threats, aligns to NIST and NSA guidance, and builds the cryptographic agility needed to adapt as standards evolve. The role also serves as Deloitte's senior technical voice with major industry partners and standards communities. Responsibilities: Define and execute the enterprise quantum-security strategy and multi-year PQC migration roadmap aligned to business objectives, regulatory requirements, and enterprise risk appetite.Serve as a trusted advisor to executive leadership on quantum risk, regulatory drivers, investment needs, and progress, including briefings to senior leaders and governance forums.Lead enterprise cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish crypto-bill-of-materials (CBOM) practices.Prioritize systems by data sensitivity, data shelf life, and exposure to harvest-now-decrypt-later attacks and oversee remediation planning and execution.Direct design and implementation of NIST-standardized algorithms (ML-KEM, ML-DSA, SLH-DSA) and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.Co-Sponsor proof-of-concept testing, performance benchmarking, and interoperability validation, and drive cryptographic agility so algorithms can be replaced without major re-engineering.Ensure alignment with NIST guidance (FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, NCCoE publications) and NSA CNSA 2.0 requirements and timelines, along with applicable federal directives and FIPS 140-3 validated module requirements.Establish and lead cryptographic governance, including policies, standards, and risk-based decision frameworks, and embed quantum-risk considerations into enterprise risk, third-party risk, procurement, and architecture review processes.Serve as a liaison to major technology vendors, cloud providers, HSM and PKI vendors, and consortia, evaluating vendor roadmaps and holding suppliers accountable for PQC readiness in contracts.Represent Deloitte in industry working groups, standards forums, and information-sharing communities (e.g., NIST NCCoE, PQC Alliance, sector ISACs) and engage clients and regulators as a thought leader.Manage the program budget, resourcing, and delivery milestones, ensuring alignment to risk reduction, regulatory compliance, and business priorities.Lead and develop a high-performing team of cryptography, PKI, and security architecture professionals while building quantum-security competency across the organization through training, reference architecture, and playbooks. The successful candidate would possess these skills Ability to work independently and collaborate as part of a teamEffective written and verbal communication skillsMeticulous attention to detail and quality of work productAbility to build and sustain professional relationshipsAbility to lead projects or workstreamsAbility to manage and prioritize multiple tasks in a fast-paced and dynamic environmentStrong interpersonal skills and professional demeanorAbility to meet deadlinesAbility to mentor and provide clear guidance to others The team Deloitte Technology-US helps power Deloitte’s success. Deloitte Technology-US drives Deloitte, which serves many of the world’s largest, most respected organizations. DT-US develops and deploys cutting-edge internal and go-to-market solutions that help Deloitte operate effectively and lead in the market. Our reputation is built on a tradition of delivering with excellence. The ~3,000 professionals in DT-US deliver services including: Cyber SecurityTechnology SupportTechnology & InfrastructureApplicationsRelationship ManagementStrategy & CommunicationsProject ManagementStrategic Financial Management DT-US Cyber Security DT-US Cyber Security vigilantly protects Deloitte and client data. The team leads a strategic cyber risk program that adapts to a rapidly changing threat landscape, changes in business strategies, risks, and vulnerabilities. Using situational awareness, threat intelligence, and building a security culture across the organization, with integration into the global cyber security capabilities that to protect the Deloitte brand. Areas of focus include: Risk & ComplianceIdentity & Access ManagementData ProtectionCyber DesignIncident ResponseSecurity ArchitectureBusiness Partnership Qualifications Required: Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.Minimum 10 years of experience in cybersecurity, including experience defining and executing enterprise security or cryptographic strategies aligned to business objectives, regulatory requirements, and risk appetite.Minimum 4 years supporting highly regulated environments (e.g., federal, defense, audit and financial services, or critical infrastructure).Minimum 2 years of people and/or process management experienceAbility to travel 10%, on average, based on the work you do and the clients and industries/sectors you serveMust be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future. Preferred: Advanced degree (master’s or higher) in Information Security, Computer Science, Mathematics, Engineering, or a related field preferred.Strong working knowledge of post-quantum cryptography and migration challenges such as key and signature sizes, performance, and hybrid modes.Deep knowledge of standards and guidance, including:NIST FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE migration publicationsNSA CNSA 2.0, NSM-10, and OMB M-23-02FIPS 140-3 / CMVP, Zero Trust architecture, and federal mandatesDeep understanding of PKI, TLS, key management, HSMs, and secure software and firmware signing.Experience leading an enterprise cryptographic inventory or large-scale crypto-migration program preferred.Proven ability to influence senior stakeholders, drive enterprise-wide change in matrixed environments, and translate complex technical risk into business terms.Experience engaging vendors, industry consortia, and standards bodies; record of speaking, publishing, or standards participation preferred.Industry certifications such as CISSP, CISM, CCSP, CISA, GIAC, or equivalent experience strongly preferred. The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $137,400 to $282,100. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. EA_ExpHire001780-01 Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at View email address on click.appcast.io. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Benefits At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work. Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more. Professional development From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. As used in this posting, "Deloitte" means Deloitte Services LP, a subsidiary of Deloitte LLP. Please see for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. Requisition code: 374941 Job ID 374941 Cyber and Technology Risk | Cybersecurity ArchitectureSame job available in 31 locations