In the context of securing sensitive data in Google Cloud, you are tasked with implementing a solution that not only encrypts data at rest and in transit but also provides comprehensive management of encryption keys, including generation, rotation, and access control. The solution must comply with industry standards and offer scalability to accommodate future growth. Considering these requirements, which Google Cloud service is specifically designed to meet these encryption key management needs? Choose the best option.