Senior Information Security Analyst - IPD - CCAS
Core
Senior Information Security Analyst specializing in cryptographic controls, PKI, encryption key management, and automation of security remediation.
Role type
Senior IC Information Security Analyst (Cryptography & Automation)
Builds
Automated workflows for vulnerability detection, certificate lifecycle management, and security control enforcement
Domain
Financial Services / Information Security / Cryptography
Deliverable
production ML models | infrastructure | dashboards & analysis
Required skills
Cryptographic concepts (PKI, encryption, key management), Python, SQL, API integration, Qualys, Venafi, Tanium, ServiceNow, vulnerability scanning, certificate lifecycle management, data analysis, root cause analysis, security policy interpretation, SDLC integration
Preferred skills
None explicitly stated as preferred (all listed under Required/Desired are treated as required capabilities for this senior role)
Technologies
Python, SQL, Qualys, Venafi, Tanium, ServiceNow
Responsibilities
Provide information security consultation on Enterprise Information Security policy and standards; Perform remediation of security assessment review issues and complex ad hoc data; Identify and direct information asset portfolio reconciliations; Develop and deliver Information Security Education Awareness and Training; Conduct security control testing and consultation with stakeholders; Evaluate and interpret internal and Enterprise Information Security policies; Collaborate with peers and managers to resolve issues; Serve as a mentor to less experienced staff; Analyze large-scale security datasets to identify non-compliant cryptographic implementations; Design and implement automation solutions using Python, SQL, and APIs; Integrate policy-aligned cryptographic baselines into workflows and SDLC processes; Drive remediation of non-compliant digital certificates, encryption configurations, and key management practices; Troubleshoot PKI-related issues, certificate misconfigurations, and key management lifecycle gaps; Partner with application and infrastructure teams to provide guidance and resolve issues; Communicate findings, risk impacts, and remediation priorities to stakeholders
Seniority
Senior, hands-on IC
