IT Security Business Analyst: Secrets & Access Governance

NTT DATA Europe & Latam; Emilia-Romagna; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

NTT DATA Romania’s Agile Transformation Office is seeking an IT Security Business Analyst to join a strategic insurance project. You will analyze secrets management, security requirements and governance across enterprise systems.

You will document findings, define functional and non-functional needs, and support risk assessments, controls, and remediation planning; strong English communication is essential.

Competenze

• Bachelor's degree in Informatics or similar field required.
• Experience in IT security analysis, security requirements engineering or governance in complex environments.
• Knowledge of secrets types (passwords, SSH keys, API keys, tokens, certificates).
• Experience translating findings into implementable security requirements.
• Strong English communication and documentation skills.

Mansioni

• Conduct end-to-end analysis of secret and credential management across applications, infra, platforms, and processes.
• Identify, classify and document secrets management details including ownership, storage, and access.
• Assess control weaknesses and propose remediation to tighten security and auditability.
• Define functional and non-functional requirements for centralized secrets management.
• Support lifecycle processes for secret creation, storage, access, rotation, and decommissioning.
• Prepare security analysis deliverables and risk assessments for governance.

Conoscenze

IT security analysis

Security requirements engineering

Control assessment

Security governance

IAM/PAM/least privilege

Stakeholder facilitation

Formazione

Bachelor's degree in Informatics or related field

Strumenti

CyberArk

HashiCorp Vault

Azure Key Vault

AWS Secrets Manager

GCP Secret Manager

Descrizione del lavoro

NTT DATA Romania’s Agile Transformation Office is seeking an IT Security Business Analyst to join a strategic insurance project. You will analyze secrets management, security requirements and governance across enterprise systems.

You will document findings, define functional and non-functional needs, and support risk assessments, controls, and remediation planning; strong English communication is essential.