Practice Director- Post Quantum Cryptography- Remote (Anywhere in the U.S.)
GuidePoint Security · United States · 3 wk ago
RemoteRemoteConsultingFull-time
We need to output HTML fragment with sections: headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate. Include a section only when posting has real, specific content for it. Avoid filler like "commensurate with experience". So we need to extract content.
The posting includes:
- General Description (intro) about GuidePoint and role.
- About The GRC Practice (description of practice).
- Roles and Responsibilities (multiple subsections: Practice Leadership & Growth, Client Engagement & Delivery Excellence, Team Development & Operational Enablement, Thought Leadership & Market Positioning). This is responsibilities.
- Required Experience And Education (list of requirements).
- Preferred Experience And Education (list of preferred qualifications).
- Travel Requirements (Up to 25% travel) - this could be a section maybe "Travel" but not in allowed headings; we could fold into a paragraph under Responsibilities or maybe a separate "Travel" but not in allowed list. The instruction says use headings only for those listed; we should not create other headings. So we can embed travel info in a paragraph under Responsibilities or maybe under a generic section? Probably include in Responsibilities as a bullet.
- Physical Requirements (Sedentary work...). Could be included similarly.
- Why GuidePoint? (benefits/perks). This includes benefits: remote workforce, medical insurance options, dental, holidays, FTO, phone/internet allowance, retirement eligibility, pet benefit option. Also maybe pay? Not specified. So we can create Benefits section with those details.
- Pay: not specified, so we should NOT create Pay section.
- Schedule: not specified, so no Schedule section.
Thus sections we will have:
- About the role (maybe combine General Description and About The GRC Practice? The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need headings exactly those strings? Probably we can use those as headings. We need to decide which sections to include based on content.
We have content for About the role: we can put the general description and about GRC practice.
Responsibilities: we have detailed responsibilities.
Requirements: we have Required Experience And Education.
Qualifications: maybe Preferred Experience And Education could go under Qualifications (or Skills). The instruction includes Qualifications as a possible heading. We could put Preferred Experience under Qualifications.
Skills: maybe we could extract skills from required/experience? But we could also not create Skills if not specific. Better to include Skills if we have explicit skill list. The posting mentions: deep expertise in applied cryptography, PKI, cryptographic engineering, business and financial acumen, ability to lead by influence, executive presence, communication skills, strategic thinker, etc. Those could go under Skills. But we already have Requirements and Qualifications; we could put skill-like items under Skills. However we must not repeat content. We could split: Required Experience And Education under Requirements; Preferred Experience under Qualifications; Skills maybe list of abilities like "Strategic thinking, executive presence, communication, ability to translate technical concepts to business risk, financial acumen, leadership". But we need to avoid duplication. Might be okay to have some overlap but better to avoid.
Given instruction: Prefer a few substantive sections over many thin ones. So maybe we combine Requirements and Qualifications into one section "Requirements" that includes both required and preferred? But they said use headings like Requirements, Qualifications, Skills. Could have both Requirements and Qualifications sections.
We need to ensure we don't create empty sections.
Thus plan:
About the role
General description + About GRC practice combined.
Responsibilities
- ... list each responsibility bullet.
We need to break responsibilities into bullet points. The posting has many paragraphs under Roles and Responsibilities with subheadings. We can convert each bullet into - . Ensure we preserve all substantive information.
We need to avoid repeating headings like "Practice Leadership & Growth" as headings inside
? We can keep them as part of the bullet text or as inside - . Probably okay to keep as plain text.
We'll extract each bullet:
Under Practice Leadership & Growth:
- Build and lead GuidePoint's Post-Quantum Cryptography advisory practice from the ground up — defining service offerings, delivery methodologies, and go-to-market strategy.
- Develop and execute a growth strategy for expanding GuidePoint's PQC portfolio, including cryptographic inventory assessments, PQC migration roadmaps, crypto-agility advisory, and quantum risk quantification.
- Manage the Practice's P&L and achieve target KPIs for revenue, utilization, and margin.
- Recruit, mentor, and develop a team of PQC consultants and cryptographic engineers to deliver services and advance internal practice objectives.
- Ensure alignment of the PQC practice with GuidePoint's broader GRC mission and service ecosystem.
- Engage with GuidePoint's regional leadership to drive a culture of collaboration, integrity, and shared success across geographically distributed teams.
- Lead strategic sales efforts through conference speaking, blog/whitepaper authoring, and podcast participation.
- Lead the sales process through generation of thought leadership content, proposal development, and developing executive relationships.
- Create new sales, marketing, and delivery collateral specific to PQC services and improve existing content.
- Shape and approve key engagement decisions such as project scope, work breakdown, estimates, and delivery schedule.
Client Engagement & Delivery Excellence:
- Partner with CISOs, CTOs, Chief Information Officers, and enterprise security architects to assess cryptographic posture and develop quantum-readiness strategies.
- Oversee the design and delivery of PQC readiness assessments, cryptographic inventory analysis, and migration roadmaps aligned to NIST Post-Quantum Cryptography standards (ML-KEM, ML-DSA, SLH-DSA), CNSA 2.0 guidance, and crypto-agility frameworks.
- Lead assessments of cryptographic dependencies across enterprise environments — TLS/SSL, PKI, code signing, key management, HSMs, and data-at-rest encryption.
- Ensure advisory engagements deliver measurable business outcomes, including reduced quantum risk exposure and clear remediation timelines.
- Lead and manage pre-sales and business development activities, including executive workshops, SOW scoping, and technical presentations with client stakeholders.
- Engage with client executive teams and boards as part of service delivery, translating complex cryptographic concepts into business risk terms.
- Execute on cryptographic transformation programs in a leadership role, typically coordinating with peer GPS practice teams (compliance, risk management, cloud security).
- Establish strong relationships and trust with customers to understand their business environments, regulatory obligations, and cryptographic dependencies.
Team Development & Operational Enablement:
- Serve as a coach and advocate for continuous professional development and technical excellence in applied cryptography and PQC.
- Proactively mature the practice, including improving existing service offerings, creating new offerings, and mentoring team members on PQC methodologies.
- Author comprehensive business and technical collateral proficiently tailored to technical, managerial, and executive audiences.
- Build and sustain a high-performing team recognized for quality, depth of cryptographic expertise, and client influence.
- Foster engagement, accountability, and collaboration across regional and practice boundaries.
- Partner with transformation, enablement, operations, and marketing teams to strengthen practice visibility, performance, and alignment.
- Work with other GuidePoint Security practices (Compliance, Risk Management, Cloud Security, Offensive Security) as part of a cohesive cross-functional team.
Thought Leadership & Market Positioning:
- Represent GuidePoint's PQC practice at executive briefings, industry conferences (RSA, Black Hat, NIST workshops), and cybersecurity summits.
- Contribute to the development of GuidePoint's PQC methodologies, assessment frameworks, and migration toolkits.
- Publish and present thought leadership content on post-quantum cryptography, cryptographic migration, quantum risk, and crypto-agility.
- Advance GuidePoint's reputation as a trusted partner for enterprise-level cryptographic transformation and quantum-readiness advisory.
- Monitor and interpret developments in NIST PQC standardization, NSA/CNSA 2.0 timelines, and emerging quantum computing capabilities to inform service strategy and client guidance.
We also have Travel Requirements and Physical Requirements; we could add as bullets under Responsibilities or maybe under a separate section but not allowed. We'll add them as bullets under Responsibilities as well.
Travel Requirements: Up to 25% travel.
Physical Requirements: Sedentary work; substantial movement of wrists, hands, and/or fingers for a minimum of 8 hours a day; required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.
We'll add those as bullets.
Now Requirements section: Required Experience And Education list.
We need to put each as
- .
List:
- 12+ years of experience in cybersecurity, with deep expertise in applied cryptography, public key infrastructure (PKI), and/or cryptographic engineering.
- Demonstrated experience leading advisory teams or cryptographic transformation initiatives.
- Strong understanding of NIST Post-Quantum Cryptography standards and algorithms (ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA/SPHINCS+, FN-DSA/Falcon).
- Familiarity with NSA CNSA 2.0 transition timelines, FIPS 203/204/205, and federal quantum-readiness mandates (NSM-10, OMB M-23-02).
- Experience engaging at Board, CXO, and CISO levels on technical and strategic cybersecurity matters.
- Proven ability to design and operationalize cryptographic migration programs or enterprise-wide technology transformation initiatives.
- Strong executive presence and credibility with senior business and technical leaders.
- Exceptional interpersonal and communication skills; ability to translate complex cryptographic concepts into business risk language.
- Strategic thinker with the ability to translate vision into actionable plans and measurable outcomes.
- Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.
Now Qualifications section: Preferred Experience And Education list.
List:
- Prior experience as a CISO, Deputy CISO, Chief Cryptographer, or senior cybersecurity executive advisor.
- Certifications such as CISSP, CISM, CCISO, or specialized cryptography credentials.
- MBA, MS in Cybersecurity, Computer Science, Mathematics, or equivalent advanced education.
- Hands-on experience with cryptographic libraries, HSM management (Thales, Entrust, AWS CloudHSM), and key management systems.
- Experience with crypto risk quantification, cryptographic inventory tools, or crypto-agility platforms (e.g., Venafi, Keyfactor, InfoSec Global).
- Familiarity with FIPS 140-3 validation processes and cryptographic module testing.
- Background in quantum computing concepts, quantum key distribution (QKD), or quantum-safe network architectures.
Now Benefits section: from Why GuidePoint? and perks.
We need to capture:
- Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
- Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
- Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
- 12 corporate holidays and a Flexible Time Off (FTO) program
-
for prose. Do NOT repeat job title as heading. Do NOT put Job ID/requisition numbers as headings. Remove boilerplate. Include a section only when posting has real, specific content for it. Avoid filler like "commensurate with experience". So we need to extract content. The posting includes: - General Description (intro) about GuidePoint and role. - About The GRC Practice (description of practice). - Roles and Responsibilities (multiple subsections: Practice Leadership & Growth, Client Engagement & Delivery Excellence, Team Development & Operational Enablement, Thought Leadership & Market Positioning). This is responsibilities. - Required Experience And Education (list of requirements). - Preferred Experience And Education (list of preferred qualifications). - Travel Requirements (Up to 25% travel) - this could be a section maybe "Travel" but not in allowed headings; we could fold into a paragraph under Responsibilities or maybe a separate "Travel" but not in allowed list. The instruction says use headings only for those listed; we should not create other headings. So we can embed travel info in a paragraph under Responsibilities or maybe under a generic section? Probably include in Responsibilities as a bullet. - Physical Requirements (Sedentary work...). Could be included similarly. - Why GuidePoint? (benefits/perks). This includes benefits: remote workforce, medical insurance options, dental, holidays, FTO, phone/internet allowance, retirement eligibility, pet benefit option. Also maybe pay? Not specified. So we can create Benefits section with those details. - Pay: not specified, so we should NOT create Pay section. - Schedule: not specified, so no Schedule section. Thus sections we will have: - About the role (maybe combine General Description and About The GRC Practice? The instruction: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we need headings exactly those strings? Probably we can use those as headings. We need to decide which sections to include based on content.
We have content for About the role: we can put the general description and about GRC practice.
Responsibilities: we have detailed responsibilities.
Requirements: we have Required Experience And Education.
Qualifications: maybe Preferred Experience And Education could go under Qualifications (or Skills). The instruction includes Qualifications as a possible heading. We could put Preferred Experience under Qualifications.
Skills: maybe we could extract skills from required/experience? But we could also not create Skills if not specific. Better to include Skills if we have explicit skill list. The posting mentions: deep expertise in applied cryptography, PKI, cryptographic engineering, business and financial acumen, ability to lead by influence, executive presence, communication skills, strategic thinker, etc. Those could go under Skills. But we already have Requirements and Qualifications; we could put skill-like items under Skills. However we must not repeat content. We could split: Required Experience And Education under Requirements; Preferred Experience under Qualifications; Skills maybe list of abilities like "Strategic thinking, executive presence, communication, ability to translate technical concepts to business risk, financial acumen, leadership". But we need to avoid duplication. Might be okay to have some overlap but better to avoid.
Given instruction: Prefer a few substantive sections over many thin ones. So maybe we combine Requirements and Qualifications into one section "Requirements" that includes both required and preferred? But they said use headings like Requirements, Qualifications, Skills. Could have both Requirements and Qualifications sections.
We need to ensure we don't create empty sections.
Thus plan:
About the role
General description + About GRC practice combined.
Responsibilities
- ... list each responsibility bullet.
- ? We can keep them as part of the bullet text or as inside
- . Probably okay to keep as plain text. We'll extract each bullet: Under Practice Leadership & Growth: - Build and lead GuidePoint's Post-Quantum Cryptography advisory practice from the ground up — defining service offerings, delivery methodologies, and go-to-market strategy. - Develop and execute a growth strategy for expanding GuidePoint's PQC portfolio, including cryptographic inventory assessments, PQC migration roadmaps, crypto-agility advisory, and quantum risk quantification. - Manage the Practice's P&L and achieve target KPIs for revenue, utilization, and margin. - Recruit, mentor, and develop a team of PQC consultants and cryptographic engineers to deliver services and advance internal practice objectives. - Ensure alignment of the PQC practice with GuidePoint's broader GRC mission and service ecosystem. - Engage with GuidePoint's regional leadership to drive a culture of collaboration, integrity, and shared success across geographically distributed teams. - Lead strategic sales efforts through conference speaking, blog/whitepaper authoring, and podcast participation. - Lead the sales process through generation of thought leadership content, proposal development, and developing executive relationships. - Create new sales, marketing, and delivery collateral specific to PQC services and improve existing content. - Shape and approve key engagement decisions such as project scope, work breakdown, estimates, and delivery schedule. Client Engagement & Delivery Excellence: - Partner with CISOs, CTOs, Chief Information Officers, and enterprise security architects to assess cryptographic posture and develop quantum-readiness strategies. - Oversee the design and delivery of PQC readiness assessments, cryptographic inventory analysis, and migration roadmaps aligned to NIST Post-Quantum Cryptography standards (ML-KEM, ML-DSA, SLH-DSA), CNSA 2.0 guidance, and crypto-agility frameworks. - Lead assessments of cryptographic dependencies across enterprise environments — TLS/SSL, PKI, code signing, key management, HSMs, and data-at-rest encryption. - Ensure advisory engagements deliver measurable business outcomes, including reduced quantum risk exposure and clear remediation timelines. - Lead and manage pre-sales and business development activities, including executive workshops, SOW scoping, and technical presentations with client stakeholders. - Engage with client executive teams and boards as part of service delivery, translating complex cryptographic concepts into business risk terms. - Execute on cryptographic transformation programs in a leadership role, typically coordinating with peer GPS practice teams (compliance, risk management, cloud security). - Establish strong relationships and trust with customers to understand their business environments, regulatory obligations, and cryptographic dependencies. Team Development & Operational Enablement: - Serve as a coach and advocate for continuous professional development and technical excellence in applied cryptography and PQC. - Proactively mature the practice, including improving existing service offerings, creating new offerings, and mentoring team members on PQC methodologies. - Author comprehensive business and technical collateral proficiently tailored to technical, managerial, and executive audiences. - Build and sustain a high-performing team recognized for quality, depth of cryptographic expertise, and client influence. - Foster engagement, accountability, and collaboration across regional and practice boundaries. - Partner with transformation, enablement, operations, and marketing teams to strengthen practice visibility, performance, and alignment. - Work with other GuidePoint Security practices (Compliance, Risk Management, Cloud Security, Offensive Security) as part of a cohesive cross-functional team. Thought Leadership & Market Positioning: - Represent GuidePoint's PQC practice at executive briefings, industry conferences (RSA, Black Hat, NIST workshops), and cybersecurity summits. - Contribute to the development of GuidePoint's PQC methodologies, assessment frameworks, and migration toolkits. - Publish and present thought leadership content on post-quantum cryptography, cryptographic migration, quantum risk, and crypto-agility. - Advance GuidePoint's reputation as a trusted partner for enterprise-level cryptographic transformation and quantum-readiness advisory. - Monitor and interpret developments in NIST PQC standardization, NSA/CNSA 2.0 timelines, and emerging quantum computing capabilities to inform service strategy and client guidance. We also have Travel Requirements and Physical Requirements; we could add as bullets under Responsibilities or maybe under a separate section but not allowed. We'll add them as bullets under Responsibilities as well. Travel Requirements: Up to 25% travel. Physical Requirements: Sedentary work; substantial movement of wrists, hands, and/or fingers for a minimum of 8 hours a day; required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day. We'll add those as bullets. Now Requirements section: Required Experience And Education list. We need to put each as
- . List: - 12+ years of experience in cybersecurity, with deep expertise in applied cryptography, public key infrastructure (PKI), and/or cryptographic engineering. - Demonstrated experience leading advisory teams or cryptographic transformation initiatives. - Strong understanding of NIST Post-Quantum Cryptography standards and algorithms (ML-KEM/Kyber, ML-DSA/Dilithium, SLH-DSA/SPHINCS+, FN-DSA/Falcon). - Familiarity with NSA CNSA 2.0 transition timelines, FIPS 203/204/205, and federal quantum-readiness mandates (NSM-10, OMB M-23-02). - Experience engaging at Board, CXO, and CISO levels on technical and strategic cybersecurity matters. - Proven ability to design and operationalize cryptographic migration programs or enterprise-wide technology transformation initiatives. - Strong executive presence and credibility with senior business and technical leaders. - Exceptional interpersonal and communication skills; ability to translate complex cryptographic concepts into business risk language. - Strategic thinker with the ability to translate vision into actionable plans and measurable outcomes. - Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes. Now Qualifications section: Preferred Experience And Education list. List: - Prior experience as a CISO, Deputy CISO, Chief Cryptographer, or senior cybersecurity executive advisor. - Certifications such as CISSP, CISM, CCISO, or specialized cryptography credentials. - MBA, MS in Cybersecurity, Computer Science, Mathematics, or equivalent advanced education. - Hands-on experience with cryptographic libraries, HSM management (Thales, Entrust, AWS CloudHSM), and key management systems. - Experience with crypto risk quantification, cryptographic inventory tools, or crypto-agility platforms (e.g., Venafi, Keyfactor, InfoSec Global). - Familiarity with FIPS 140-3 validation processes and cryptographic module testing. - Background in quantum computing concepts, quantum key distribution (QKD), or quantum-safe network architectures. Now Benefits section: from Why GuidePoint? and perks. We need to capture: - Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions) - Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options) - Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans - 12 corporate holidays and a Flexible Time Off (FTO) program -