Consider the following; failover to the original primary replica and regenerate the master key with a new password (key). Use ssisdb. I said you should consider the option so you should review it and probably test it in your non-prod environment first. Schedule during maintenance window.

ALTER MASTER KEY REGENERATE WITH ENCRYPTION BY PASSWORD = 'newstrongpassword'

--

Charles