IT Business Analyst

Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems. Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.

Job Title: IT Business Analyst
Duration: 6 Months Contract
Location: New York, NY 10172
Hybrid role
Job Experience Level: Senior (10 Years)

Position Summary
Enterprise Information Protection (EIP) organization is seeking an experienced IT Business Analyst contractor to support strategic Encryption and Post-Quantum Cryptography (PQC) initiatives. This role will provide project-based analysis, documentation, stakeholder coordination, and reporting support for enterprise cryptographic inventory, encryption modernization, and PQC readiness programs. The consultant will work across Security Engineering, Security Architecture, Infrastructure, Application Development, Risk, and Technology teams to facilitate requirements gathering, dependency tracking, and program execution. Activities align with EIP's focus on cryptographic inventory management and PQC readiness.

Scope of Work

• Gather, analyze, and document business and technical requirements for encryption and PQC-related initiatives.
• Coordinate workshops and meetings with technology and cybersecurity stakeholders.
• Support enterprise cryptographic inventory and dependency identification efforts.
• Document current-state and future-state processes, workflows, data flows, and control requirements.
• Create and maintain project documentation, requirements traceability, RAID logs, and executive reporting.
• Support vendor assessments, proof-of-concepts, and tool evaluations as needed.

Required Experience

• 7 years of Business Analyst experience supporting technology or cybersecurity initiatives.
• Strong requirements gathering and documentation skills.
• Experience supporting enterprise-scale technology projects.
• Financial services experience.
• Cybersecurity, data protection, encryption, PKI, or key management experience.
• Exposure to CRI & NIST cybersecurity standards.
• Knowledge of cryptographic controls, certificate management, or crypto-agility concepts.
• Familiarity with Post-Quantum Cryptography (PQC) initiatives and emerging regulatory expectations.
• Lead enterprise cryptographic inventory and discovery efforts across applications, databases, cloud platforms, middleware, file systems, certificates, and key management systems.

Analyze and document cryptographic dependencies including:

• TLS/SSL certificates
• PKI infrastructure
• HSM deployments
• Key management solutions
• Database encryption
• File and disk encryption
• Tokenization and data masking solutions
• Support identification of legacy cryptographic algorithms and protocols including RSA, ECC, SHA-1, SHA-2, TLS versions, and certificate dependencies in preparation for PQC transition activities.
• Partner with engineering teams to develop crypto-agility requirements and transition roadmaps.
• Facilitate collection of encryption requirements for data at rest, data in transit, and data in use across enterprise environments.
• Document cryptographic controls supporting:
• Data Loss Prevention (DLP)
• Database Security
• Cloud Security
• Identity & Access Management
• Application Security
• Third-Party Risk Management
• Support evaluation and implementation planning for CRI & NIST Post-Quantum Cryptography standards and migration approaches.
• Develop process flows and inventory models for cryptographic assets, certificates, keys, algorithms, and associated business owners.
• Build reporting and dashboards tracking:
• Cryptographic asset coverage
• PQC readiness status
• Encryption control maturity
• High-risk cryptographic findings
• Remediation milestones

Preferred Technical Experience
Knowledge of enterprise encryption technologies including AES-256, RSA, ECC, TLS, SSH, PGP, KMIP, and certificate lifecycle management.
Experience working with:

• PKI platforms
• Certificate Authorities
• Hardware Security Modules (HSMs)
• Key Management Systems (KMS)
• Secrets Management platforms
• Familiarity with cloud encryption technologies across AWS, Azure, and GCP.
• Understanding of database encryption, transparent data encryption (TDE), column-level encryption, and tokenization.
• Experience supporting cryptographic inventory or certificate inventory initiatives.
• Familiarity with cryptographic scanning and discovery tools.
• Understanding of NIST PQC algorithms (ML-KEM, ML-DSA, FN-DSA) and enterprise crypto-agility concepts.
• Experience supporting regulatory requirements including NYDFS, FFIEC, PCI-DSS, and global banking security standards.