Senior Cybersecurity Business Analyst – Encryption & Post-Quantum Cryptography

Axiom Path•New York City, NY

3d•Hybrid

About The Position

The Senior Cybersecurity Business Analyst will support strategic cryptography modernization initiatives at a major global financial institution. The role focuses on enterprise encryption discovery, crypto-agility, and preparation for the transition to post-quantum cryptography (PQC) in a highly regulated environment. The position works across cybersecurity, engineering, architecture, infrastructure, application development, and risk teams. This W2-only role is a hybrid opportunity based in New York City. The analyst will lead business and technical analysis, coordinate stakeholders, document requirements and processes, support cryptographic discovery and technology evaluations, and help develop roadmaps for encryption modernization and adoption of emerging NIST post-quantum cryptography standards.

Requirements

At least 7 years of Business Analyst experience supporting complex enterprise technology or cybersecurity initiatives; senior-level experience is strongly preferred.
Strong requirements elicitation, analysis, process documentation, stakeholder management, workshop facilitation, and executive reporting capabilities.
Financial-services experience within a large, regulated enterprise environment.
Demonstrated exposure to cybersecurity, data protection, encryption, PKI, certificate management, key management, or related cryptographic technologies.
Working understanding of enterprise cryptographic controls and dependencies across applications and infrastructure.
Familiarity with encryption technologies and protocols such as AES-256, RSA, ECC, TLS, SSH, PGP, and KMIP.
Exposure to PKI platforms, certificate authorities, HSMs, KMS platforms, and secrets-management technologies.
Knowledge of encryption approaches for data at rest, data in transit, databases, files, disks, cloud environments, and application platforms.
Familiarity with AWS, Azure, or GCP encryption and key-management capabilities.
Knowledge of crypto-agility and Post-Quantum Cryptography concepts, including emerging NIST standards and algorithms such as ML-KEM and ML-DSA.
Exposure to cybersecurity frameworks or regulatory standards such as NIST, CRI, NYDFS, FFIEC, PCI-DSS, or comparable banking-security requirements.
Strong communication skills and ability to translate complex security and cryptographic concepts between technical teams and business stakeholders.

Responsibilities

Lead business and technical analysis activities supporting enterprise encryption and post-quantum cryptography initiatives.
Gather, analyze, and document requirements across cybersecurity, infrastructure, application development, architecture, and risk stakeholders.
Drive cryptographic inventory and discovery across applications, databases, cloud platforms, middleware, certificates, file systems, and key-management environments.
Analyze dependencies involving PKI, TLS/SSL certificates, HSMs, key-management systems, database encryption, tokenization, data masking, and related cryptographic controls.
Document current-state and future-state processes, data flows, control requirements, dependencies, and crypto-agility requirements.
Support identification of legacy algorithms, protocols, and certificate dependencies that may require modernization for PQC transition planning.
Maintain requirements traceability, RAID logs, remediation milestones, project documentation, executive reporting, and readiness dashboards.
Facilitate workshops and working sessions among security engineering, security architecture, technology, application, and risk stakeholders.
Support vendor assessments, proofs of concept, cryptographic discovery tooling, and technology evaluations.
Help establish roadmaps for encryption modernization and adoption of emerging NIST post-quantum cryptography standards.