India - Hyderabad

JOB ID: R-248006 LOCATION: India - Hyderabad WORK LOCATION TYPE: On Site DATE POSTED: Jul. 21, 2026 CATEGORY: Information Systems

Role Name: Senior Manager Information Security - Encryption Agility Service Lead

Job Posting Title :Sr. Manager Information Security - Encryption Agility Service Lead

Workday Job Title :Sr. Manager Information Security

Department Name :Trusted Core Technologies

Role GCF :6A

ABOUT AMGEN

Amgen harnesses the best of biology and technology to fight the world's toughest diseases, and make people's lives easier, fuller and longer. We discover, develop, manufacture and deliver cutting-edge medicines to help millions of patients. Amgen helped establish the biotechnology industry more than 40 years ago and remains on the cutting-edge of innovation, using technology and human genetic data to push beyond what's known today.

ABOUT THE ROLE

Role Description : Roles & Responsibilities :

- Establish, operate, and continuously improve the enterprise Encryption Agility Team and Service, including the service charter, governance model, operating cadence, intake process, Responsible, Accountable, Consulted, and Informed (RACI) model, roadmap, Key Performance Indicators (KPIs), Key Risk Indicators (KRIs), executive reporting, and service improvement plan.
- Lead, coach, mentor, and manage Encryption Agility Team members, including Amgen full-time employees (FTEs), external workers, cryptographic engineers, security architecture analysts, product ownership support, and part-time contributors from partner teams.
- Partner with the Principal Architect to translate enterprise Post-Quantum Cryptography (PQC) strategy into standards and specifications, reference architectures, implementation patterns, practical engineering guidance, remediation backlogs,



and production-ready cryptographic design decisions.
- Own the enterprise cryptographic standards and specifications roadmap, including approved algorithms, key sizes, protocols, Transport Layer Security (TLS) and cipher policies, certificate requirements, Key Management Services (KMS) and secrets requirements, exception criteria, Rivest-Shamir-Adleman (RSA) and Elliptic Curve Cryptography (ECC) sunset planning, and annual standards refresh.
- Lead delivery across the full PQC lifecycle, including assessment wrap-up, quick wins, discovery tooling selection, iterative discovery, vendor and third-party outreach, PQC architecture, testing and trials, production rollout, automation, monitoring, and steady-state service operations.
- Build, govern, and mature the Amgen Cryptographic Bill of Materials (CBOM), including required fields, asset ownership, quantum-vulnerability status, remediation status, data quality controls, reporting requirements, and integration of cryptographic inventory and risk data across relevant Amgen platforms.
- Direct enterprise cryptographic discovery across source code, binaries, cloud key services, endpoints, file systems, network traffic, Public Key Infrastructure (PKI) and certificates, KMS and secrets, vendor attestations, and Subject Matter Expert (SME) interviews to create a reliable enterprise cryptographic inventory.
- Coordinate with Digital Identity Access Services (DIAS),



PKI service owners, certificate management teams, cloud, infrastructure, and platform teams on certificate visibility, Certificate Lifecycle Manager (CLM) evaluation, certificate rotation policy, manual-to-automated deployment migration, post-quantum PKI readiness, hybrid certificate testing, Certificate Authority (CA) roadmap, operational change windows, enterprise KMS strategy, Hardware Security Module (HSM) and cloud KMS roadmaps, secrets management, key rotation, key retirement, and centralized or federated key management control patterns.
- Partner with Application Security, Secure Software Development Lifecycle (SSDLC), DevOps, Artificial Intelligence (AI) Security, Enterprise Architecture, and engineering teams to publish approved cryptographic libraries, reusable patterns, Continuous Integration/Continuous Delivery (CI/CD) controls, scanning rules, secure code examples, and remediation playbooks.
- Coordinate with Risk and Compliance, Legal, Procurement, Third-Party Risk Management (TPRM), and vendor management to implement PQC questionnaires, CBOM requests, contract language, supplier roadmap tracking, risk acceptance, and executive escalation for vendors and Software as a Service (SaaS) providers.
- Provide senior technical escalation and hands-on leadership for cryptographic standards exceptions, scan findings, false-positive triage, certificate outages, key and secret configuration issues, tool integration blockers, design tradeoffs, Steal-Now-Decrypt-Later (SNDL) exposure, identity and certificate risks, outdated TLS and cipher configurations, legacy cryptography, untracked keys, manual certificate processes, Operational Technology (OT) and manufacturing scope definition, developer and

📌 Encryption Agility Service Lead (Hyderabad)
🏢 AMGEN
📍 Hyderabad