IT Business Analyst at eTeam in New York, NY

Job description

• Enterprise Information Protection (EIP) organization is seeking an experienced IT Business Analyst contractor to support strategic Encryption and Post-Quantum Cryptography (PQC) initiatives. This role will provide project-based analysis, documentation, stakeholder coordination, and reporting support for enterprise cryptographic inventory, encryption modernization, and PQC readiness programs. The consultant will work across Security Engineering, Security Architecture, Infrastructure, Application Development, Risk, and Technology teams to facilitate requirements gathering, dependency tracking, and program execution. Activities align with EIP's focus on cryptographic inventory management and PQC readiness.

Responsibilities

• Gather, analyze, and document business and technical requirements for encryption and PQC-related initiatives.
• Coordinate workshops and meetings with technology and cybersecurity stakeholders.
• Support enterprise cryptographic inventory and dependency identification efforts.
• Document current-state and future-state processes, workflows, data flows, and control requirements.
• Create and maintain project documentation, requirements traceability, RAID logs, and executive reporting.
• Support vendor assessments, proof-of-concepts, and tool evaluations as needed.

Requirements

• 7 years of Business Analyst experience supporting technology or cybersecurity initiatives.
• Strong requirements gathering and documentation skills.
• Experience supporting enterprise-scale technology projects.
• Financial services experience.
• Cybersecurity, data protection, encryption, PKI, or key management experience.
• Exposure to CRI & NIST cybersecurity standards.
• Knowledge of cryptographic controls, certificate management, or crypto-agility concepts.
• Familiarity with Post-Quantum Cryptography (PQC) initiatives and emerging regulatory expectations.
• Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems.
• TLS/SSL certificates
• PKI infrastructure
• HSM deployments
• Key management solutions
• Database encryption
• File and disk encryption
• Tokenization and data masking solutions
• Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.
• Partner with engineering teams to develop crypto-agility requirements and transition roadmaps.
• Facilitate collection of encryption requirements for data at rest, data in transit, and data in use across enterprise environments.
• Data Loss Prevention (DLP)
• Database Security
• Cloud Security
• Identity & Access Management
• Application Security
• Third-Party Risk Management
• Support evaluation and implementation planning for CRI & NIST Post-Quantum Cryptography standards and migration approaches.
• Develop process flows and inventory models for cryptographic assets, certificates, keys, algorithms, and associated business owners.
• Cryptographic asset coverage
• PQC readiness status
• Encryption control maturity
• High-risk cryptographic findings
• Remediation milestones
• Knowledge of enterprise encryption technologies including AES-256, RSA, ECC, TLS, SSH, PGP, KMIP, and certificate lifecycle management.
• PKI platforms
• Certificate Authorities
• Hardware Security Modules (HSMs)
• Key Management Systems (KMS)
• Secrets Management platforms
• Familiarity with cloud encryption technologies across AWS, Azure, and GCP.
• Understanding of database encryption, transparent data encryption (TDE), column-level encryption, and tokenization.
• Experience supporting cryptographic inventory or certificate inventory initiatives.
• Familiarity with cryptographic scanning and discovery tools.
• Understanding of NIST PQC algorithms (ML-KEM, ML-DSA, FN-DSA) and enterprise crypto-agility concepts.
• Experience supporting regulatory requirements including NYDFS, FFIEC, PCI-DSS, and global banking security standards.

Skills

Required

• Requirements gathering and documentation
• Financial services domain knowledge
• CRI & NIST cybersecurity standards
• Cryptographic inventory and discovery
• TLS/SSL certificates
• PKI infrastructure
• HSM deployments
• Key management solutions
• Database encryption
• File and disk encryption
• Tokenization and data masking solutions

Preferred

• Certificate lifecycle management
• PKI platforms
• Certificate Authorities
• Hardware Security Modules (HSMs)
• Key Management Systems (KMS)
• Secrets Management platforms