Senior Cybersecurity Business Analyst – Encryption & Post-Quantum Cryptography

Axiom Path•New York, NY

26d•Hybrid

About The Position

Join the enterprise information protection organization of a major global financial institution known for combining deep financial-services expertise with a strong emphasis on integrity, collaboration, innovation, and disciplined risk management. The cybersecurity organization works across engineering, architecture, infrastructure, application development, and risk teams to protect highly regulated enterprise environments. This position will support strategic cryptography modernization efforts, including enterprise encryption discovery, crypto-agility, and preparation for the transition to post-quantum cryptography.

Requirements

7+ years of Business Analyst experience supporting complex enterprise technology or cybersecurity initiatives; senior-level experience is strongly preferred.
Strong requirements elicitation, analysis, process documentation, stakeholder management, workshop facilitation, and executive reporting capabilities.
Financial-services experience within a large, regulated enterprise environment.
Demonstrated exposure to cybersecurity, data protection, encryption, PKI, certificate management, key management, or related cryptographic technologies.
Working understanding of enterprise cryptographic controls and dependencies across applications and infrastructure.
Familiarity with encryption technologies and protocols such as AES-256, RSA, ECC, TLS, SSH, PGP, and KMIP.
Exposure to PKI platforms, certificate authorities, HSMs, KMS platforms, and secrets-management technologies.
Knowledge of encryption approaches for data at rest, data in transit, databases, files, disks, cloud environments, and application platforms.
Familiarity with AWS, Azure, or GCP encryption and key-management capabilities.
Knowledge of crypto-agility and Post-Quantum Cryptography concepts, including emerging NIST standards and algorithms such as ML-KEM and ML-DSA.
Exposure to cybersecurity frameworks or regulatory standards such as NIST, CRI, NYDFS, FFIEC, PCI-DSS, or comparable banking-security requirements.
Strong communication skills with the ability to translate complex security and cryptographic concepts between highly technical teams and business stakeholders.

Responsibilities

Lead business and technical analysis activities supporting enterprise encryption and post-quantum cryptography initiatives.
Gather, analyze, and document requirements across cybersecurity, infrastructure, application development, architecture, and risk stakeholders.
Drive cryptographic inventory and discovery efforts spanning applications, databases, cloud platforms, middleware, certificates, file systems, and key-management environments.
Analyze dependencies involving PKI, TLS/SSL certificates, HSMs, key-management systems, database encryption, tokenization, data masking, and related cryptographic controls.
Document current-state and future-state processes, data flows, control requirements, dependencies, and crypto-agility requirements.
Support identification of legacy algorithms, protocols, and certificate dependencies that may require modernization as part of PQC transition planning.
Maintain requirements traceability, RAID logs, remediation milestones, project documentation, executive reporting, and readiness dashboards.
Facilitate workshops and working sessions between security engineering, security architecture, technology, application, and risk stakeholders.
Support vendor assessments, proofs of concept, cryptographic discovery tooling, and technology evaluations.
Help establish roadmaps for encryption modernization and adoption of emerging NIST post-quantum cryptography standards.