Summary
What you’ll impact
The IT Business Analyst will support the organization’s Enterprise Information Protection team by driving encryption and Post-Quantum Cryptography initiatives. The role involves gathering and documenting requirements, coordinating stakeholders, and managing cryptographic inventory and readiness programs across multiple technology and security teams.
Responsibilities
What you'll do
- Gather, analyze, and document business and technical requirements for encryption and PQC-related initiatives.
- Coordinate workshops and meetings with technology and cybersecurity stakeholders.
- Support enterprise cryptographic inventory and dependency identification efforts.
- Document current-state and future-state processes, workflows, data flows, and control requirements.
- Create and maintain project documentation, requirements traceability, RAID logs, and executive reporting.
- Support vendor assessments, proof-of-concepts, and tool evaluations as needed.
- Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems.
- Analyze And Document Cryptographic Dependencies Including TLS/SSL certificates, PKI infrastructure, HSM deployments, Key management solutions, Database encryption, File and disk encryption, Tokenization and data masking solutions.
- Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.
- Partner with engineering teams to develop crypto-agility requirements and transition roadmaps.
- Facilitate collection of encryption requirements for data at rest, data in transit, and data in use across enterprise environments.
- Document Cryptographic Controls Supporting Data Loss Prevention (DLP), Database Security, Cloud Security, Identity & Access Management, Application Security, Third-Party Risk Management.
- Support evaluation and implementation planning for CRI & NIST Post-Quantum Cryptography standards and migration approaches.
- Develop process flows and inventory models for cryptographic assets, certificates, keys, algorithms, and associated business owners.
- Build Reporting And Dashboards Tracking Cryptographic asset coverage, PQC readiness status, Encryption control maturity, High-risk cryptographic findings, Remediation milestones.
Requirements
What you’ll bring
- 7+ years of Business Analyst experience supporting technology or cybersecurity initiatives.
- Strong Requirements Gathering And Documentation Skills.
- Experience supporting enterprise-scale technology projects.
- Financial services experience.
- Cybersecurity, data protection, encryption, PKI, or key management experience.
- Exposure to CRI & NIST cybersecurity standards.
- Knowledge of cryptographic controls, certificate management, or crypto-agility concepts.
- Familiarity with Post-Quantum Cryptography (PQC) initiatives and emerging regulatory expectations.
- Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems.
- Analyze And Document Cryptographic Dependencies Including TLS/SSL certificates, PKI infrastructure, HSM deployments, Key management solutions, Database encryption, File and disk encryption, Tokenization and data masking solutions.
- Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.
- Partner with engineering teams to develop crypto-agility requirements and transition roadmaps.
- Facilitate collection of encryption requirements for data at rest, data in transit, and data in use across enterprise environments.
- Document Cryptographic Controls Supporting Data Loss Prevention (DLP), Database Security, Cloud Security, Identity & Access Management, Application Security, Third-Party Risk Management.
- Support evaluation and implementation planning for CRI & NIST Post-Quantum Cryptography standards and migration approaches.
- Develop process flows and inventory models for cryptographic assets, certificates, keys, algorithms, and associated business owners.
- Build Reporting And Dashboards Tracking Cryptographic asset coverage, PQC readiness status, Encryption control maturity, High-risk cryptographic findings, Remediation milestones.