Communications Security (COMSEC) Manager

Summary The COMSEC Manager protects the confidentiality, integrity and authenticity of the organization's communications and owns the full lifecycle of its cryptographic material. Main

Define and maintain the cryptographic policy: approved algorithms, key lengths, cryptoperiods and protocols. Manage the full lifecycle of cryptographic keys and keying material: generation, registration, distribution, storage, rotation, revocation, archiving and destruction. Oversee cryptographic hardware and software, including hardware security modules (HSMs) and key management systems.

Act as COMSEC custodian and maintain an accurate, auditable inventory of COMSEC assets. Design and validate secure communications architecture for voice, data, and networks. Ensure compliance with internal security policies and applicable laws.

Manage incident response and risk mitigation for COMSEC-related incidents. Develop and deliver COMSEC training for staff. Key

Bachelor's or Master's degree in cybersecurity, information security, or a related field. At least 5 years of experience in information security, including 3 in communications security. In-depth knowledge of encryption algorithms (AES, RSA, elliptic curve).

Hands-on experience with HSMs and key management systems. Strong understanding of ISO/IEC 27001 and NIST frameworks. Fluent written and spoken English.

Nice to Have Experience in financial services, telecommunications, or government. CISSP, CISM, CompTIA Security+