Senior Director Analyst, Cryptography, Remote United States

Gartner•Remote - Texas, TX

4d•Remote

About The Position

As a Senior Director Analyst, you will engage with clients daily via video conference and occasionally onsite at Gartner conferences to support their most challenging business initiatives and help them make the right decisions. You will research markets, practices, and trends to produce written research for clients. You will also collaborate with peers, become a published author on Gartner.com, and grow your knowledge and brand as a Gartner Analyst. Your responsibilities will include conducting research and analysis in data security, with a focus on encryption, PKI, post-quantum cryptography, and key/certificate management. You will respond to client questions, deliver actionable advice, and write high-quality content on strategic and practical considerations of cryptography. You will predict market developments, assist clients in selection processes, and provide feedback to vendors on emerging trends. Staying ahead of developments in these areas through collaboration with data security, privacy, and identity and access management teams is crucial. You will also proactively support the sales organization to retain and grow business.

Requirements

Subject matter familiarity in cryptography and encryption with the ability to demonstrate understanding of the security, compliance, and business benefits and emerging technologies in those markets.
Lifelong learner with foundational knowledge and experience in cryptography, encryption, PKI, key and certificate management, HSMs and Cybersecurity in general.
An understanding of data and cloud security concepts and markets, including key and certificate management for human and machine identities and cloud infrastructure.
Familiarity with the encryption and cryptography management vendors like Entrust, IBM, Keyfactor and Thales.
Familiarity with security considerations for cloud, SaaS and on-premise environments and how they are impacted by quantum computing and privacy and data security requirements.
Fundamentals of Cryptography, for example: Symmetric Key Cryptography: Understanding of algorithms like AES, DES, and their modes of operation. Asymmetric Key Cryptography: Knowledge of algorithms like RSA, ECC, DH, ML-KEM, ML-DSA and SLH-DSA, and their use in digital signatures and key exchange. Hash Functions: Familiarity with hash functions like SHA-2, SHA-3, and their applications in data integrity and authentication. Cryptographic Protocols: Understanding of protocols like SSL/TLS, SSH, and others used in secure communications.
Computer Science and Engineering Knowledge, for example: Computer Networks and Security: Understanding of how cryptography is applied in various network security protocols. Software Development Skills: Knowledge of how cryptographic algorithms and protocols are used in applications and familiarity with standard APIs e.g. PKCS#11 Security Principles and Practices: Knowledge of Security Standards: Familiarity with standards like FIPS, Common Criteria, and ISO/IEC 27001. CNSA 2.0, DORA. Security Architecture and Models: Understanding of how cryptographic techniques fit into overall security architectures, for example by using HSMs, Cloud Key Management Services as well as the applicable hybrid and multi-cloud implementations.
Current and Emerging Technologies: Postquantum Cryptography: Awareness of the developments in quantum computing and their implications for current cryptographic techniques. Blockchain and Cryptocurrencies: Understanding the cryptographic principles behind blockchain technologies and digital currencies.
Compliance and Regulatory Considerations: Compliance and Regulations: Awareness of laws and regulations related to cryptography, such as export controls and data protection laws (e.g., GDPR, HIPAA).
Practical Experience: Real-World Implementation: Experience in implementing, staffing and operating cryptographic and key management solutions in diverse environments.
Experience participating in matrixed projects and providing guidance regarding key management tools and cryptographic standards with a focus on crypto-agility.
Business Acumen. Understand how an organization operates (risks and opportunities) and the drivers of a company's performance.
Intellectual Agility. Analytical thinker with the ability to process and understand information quickly, diagnose the issue in order to take positions and make actionable intelligent recommendations.
Collaboration. Can collaborate productively, build relationships, and move work forward with internal partners and clients.
Communication. Can engage in clear, effective dialogue on complex concepts, and communicate them with poise.
Leadership and Influence. Persuades, encourages, or gains the support of others and causes them to take action.
Ownership & Impact. Accepts personal accountability, takes ownership and perseveres. Embrace feedback.
Minimum of 12 years of experience in a research, or technology, related role.
Bachelor's or equivalent experience.
Ability and willingness to conduct occasional travel, regionally and globally.

Responsibilities

Conduct research and analysis in data security, with a focus on encryption, PKI, post-quantum cryptography, key and certificate management.
Respond to client questions and deliver high quality actionable advice through a variety of media.
Write high quality, clear, actionable, content focused on strategic and practical considerations of cryptography, encryption, key and certificate management.
Predict how crypto-discovery, key and certificate management markets are developing, help clients in their selection process and provide feedback to vendors on emerging trends in buyer needs.
Remain ahead of the curve on developments and issues within these specified areas, through peer collaboration from the data security, privacy, and identity and access management teams.
Proactively work with the wider sales organization and deliver outstanding sales support in order to retain and grow the business.