Cryptographic Risk Assessment Specialist (Contract – Part-time)

Cystel; Düsseldorf; Remote; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A cybersecurity consulting firm is looking for a professional to lead a cryptographic risk assessment project. This role involves assessing cryptographic practices and helping prepare organizations for post-quantum cryptography readiness. Ideal candidates should understand cryptographic controls and possess strong communication skills. The position is remote, with an estimated duration of 6–8 weeks.

Qualifikationen

• Strong understanding of cryptographic technologies and controls.
• Experience with cloud key management platforms.
• Ability to document and communicate risks effectively.

Aufgaben

• Conduct a high-level encryption checklist to assess current state.
• Collaborate with the client on Azure Key Vault assessment.
• Define key milestones for post-quantum cryptography compliance.

Kenntnisse

Cryptographic technologies and controls

Azure Key Vault or similar platforms

Cryptographic standards and risk assessment frameworks

Knowledge of quantum computing threats

Strong communication skills

Working with cross-functional teams

Translating technical risks into business impacts

Ausbildung

CISSP, CISM, CCSP or similar certifications

Jobbeschreibung

Project Duration : Short-term Contract (estimated 6–8 weeks)

Location : Remote

Reporting To : Information Security Lead / Project Manager

Purpose of the Role

To support a high-level cryptographic risk assessment for a client organization. The project aims to establish a baseline cryptographic posture, assess key management practices, prioritize cryptographic risks, and outline a strategic roadmap for post-quantum cryptography readiness.

Key Responsibilities

• Baseline Assessment & Discovery
• Facilitate kickoff meetings and gather information from key stakeholders.
• Conduct a high-level encryption checklist to assess current state.
• Review group-level standards, prior audits, and reports.
• Assist in the identification and documentation of the existing cryptographic inventory and services (e.g., internal data storage, cloud encryption, PKI, DRM).
• Key Management
• Collaborate with the client to assess the current use of Azure Key Vault and other key management tools.
• Contribute to the development of a formal Key Management Plan.
• Deliver or support 1:1 training sessions for relevant stakeholders.
• Cryptographic Assurance
• Identify process gaps related to cryptographic review and assurance.
• Help define and document processes to evaluate cryptographic systems regularly, beyond external penetration tests.
• Risk Prioritization
• Assist in defining cryptographic risk assessment criteria.
• Support the development of a risk prioritization matrix and associated mitigation strategies.
• Post-Quantum Cryptography Readiness
• Collaborate on the creation of a high-level PQC readiness roadmap.
• Define key milestones, resource requirements, and timelines to achieve PQC compliance in the future.
• Executive Engagement
• Support the preparation and delivery of executive summary materials.
• Contribute to the design and facilitation of a 2-hour tabletop exercise for board-level stakeholders, focused on quantum threat scenarios and decision-making.

Required Skills and Experience

• Strong understanding of cryptographic technologies and controls (e.g., PKI, key management, encryption in transit / at rest).
• Experience with Azure Key Vault or similar cloud key management platforms.
• Familiarity with cryptographic standards and risk assessment frameworks.
• Knowledge of quantum computing threats and post-quantum cryptography (preferred).
• Strong communication and documentation skills.
• Experience working with cross-functional teams, including technical and executive stakeholders.
• Ability to translate technical risks into business impacts and mitigation strategies.

Desirable Qualifications

• CISSP, CISM, CCSP, or similar certifications.
• Background in cybersecurity consulting, compliance, or security architecture.
• Experience delivering executive presentations and tabletop exercises.