Senior Business Analyst

Conceptual understanding of secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) and/or non-human identity tooling, sufficient to work effectively with the engineers implementing product customizations. Strong technical project management experience — able to assess priority and risk, keep complex implementations on track, and proactively surface risks and ask for help rather than let issues surface late.

Our Client, a Global Services and Media company, is looking for a Senior Business Analyst for their New York¸ NY/ Remote(out of NYC) location.
 
Responsibilities:

• Nhi Governance Platform Rollout & Operationalization
• Drive the end-to-end deployment of Client NHI governance platform across Client environment, including integration with cloud platforms, identity providers, SaaS tools, and internal systems
• Partner with engineers and analysts on the IAM team to define and build the operational model for NHI discovery, classification, ownership assignment, and lifecycle management
• Develop dashboards, alerting, and reporting that give Client and business stakeholders real-time visibility into machine identity posture
• Machine Identity Governance
• Establish intake, assessment, and approval workflows for new machine identities and agent credentials across lines of business
• Partner with domain SMEs to define lifecycle management processes — provisioning, rotation, access reviews, and decommissioning — for secrets, service accounts, API keys, and OAuth tokens
• Identify ungoverned or orphaned credentials and drive remediation in collaboration with Cloud, Identity, and Engineering teams
• Cross-Functional Partnership
• Serve as the operational connective tissue between Identity Management, Cloud Operations, Enterprise Applications, and the Cybersecurity team
• Partner with the Cyber team to translate policy into enforceable, automated controls
• Collaborate with the AI team and lines of business to enable governed adoption of agentic AI — governance as an enabler, not a bottleneck
• Represent Client in cross-functional forums on AI governance and machine identity strategy
• Program Development
• Build and maintain runbooks, standards, and documentation for machine identity operations
• Track metrics that demonstrate risk reduction and operational maturity over time
• Stay current on the evolving NHI and agentic AI threat landscape and bring relevant practices back to Client

 
Requirements:

• Experience in Identity and Access Management (IAM), preferably including Identity Governance and Non-Human Identity (NHI) programs
• Strong technical project management experience — able to assess priority and risk, keep complex implementations on track, and proactively surface risks and ask for help rather than let issues surface late
• Solid technical grounding in modern integration technology, including APIs, cloud platforms, connectors, REST, SCIM, and enterprise system integrations
• Familiarity with OAuth, OIDC, SAML, and API key-based authentication patterns
• Business analysis experience, including the ability to gather requirements and produce technical requirements documents, design documents, and related program artifacts
• Conceptual understanding of secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault) and/or non-human identity tooling, sufficient to work effectively with the engineers implementing product customizations
• Conceptual understanding of cloud environments (AWS, Azure, or GCP) and how machine identities are created and used within them
• Ability to work across organizational boundaries: you're as comfortable in a technical deep-dive with engineers as you are presenting risk posture to stakeholders
• Clear, structured communicator — written and verbal
• Experience with NHI governance or secrets security platforms (e.g., Entro Security, Astrix, Elimity, or similar)
• Background in or exposure to agentic AI frameworks and how AI agents authenticate to services
• Relevant certifications (CISSP, CCSP, cloud provider security certs)
• Experience in media, publishing, or other data-sensitive industries

 
Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities