IT Security Business Analyst

Who We Are We are a department within NTT DATA Romania, known as the Agile Transformation Office, your gateway to creating real impact in software projects by keeping the focus on value and alignment.

What you’ll be doing - Conduct end-to-end analysis of existing secret and credential management practices across applications, infrastructure, platforms and operational processes. - Identify, classify and document technical and workforce secrets, including ownership, usage, storage location, criticality, lifecycle stage, access model and associated risks. - Assess current-state control weaknesses such as unmanaged SSH keys, hardcoded credentials, shared accounts, undocumented secret usage, insufficient rotation and weak auditability. - Define and document detailed functional and non-functional requirements for centralized secrets management capabilities. - Support the design of compliant lifecycle processes for creation, storage, access, usage, rotation, revocation, emergency access and decommissioning of secrets. - Analyze dependencies across systems, applications, service accounts, technical users and operational teams to support onboarding and migration planning. - Prepare clear and defensible security analysis deliverables, including gap assessments, process documentation, risk assessments, control requirements and remediation recommendations. - Facilitate and document workshops with technical, operational and business stakeholders to gather requirements, validate findings and resolve ambiguities. - Contribute to tool evaluation

IT Security Business Analyst

Who We Are We are a department within NTT DATA Romania, known as the Agile Transformation Office, your gateway to creating real impact in software projects by keeping the focus on value and alignment.

What you’ll be doing - Conduct end-to-end analysis of existing secret and credential management practices across applications, infrastructure, platforms and operational processes. - Identify, classify and document technical and workforce secrets, including ownership, usage, storage location, criticality, lifecycle stage, access model and associated risks. - Assess current-state control weaknesses such as unmanaged SSH keys, hardcoded credentials, shared accounts, undocumented secret usage, insufficient rotation and weak auditability. - Define and document detailed functional and non-functional requirements for centralized secrets management capabilities. - Support the design of compliant lifecycle processes for creation, storage, access, usage, rotation, revocation, emergency access and decommissioning of secrets. - Analyze dependencies across systems, applications, service accounts, technical users and operational teams to support onboarding and migration planning. - Prepare clear and defensible security analysis deliverables, including gap assessments, process documentation, risk assessments, control requirements and remediation recommendations. - Facilitate and document workshops with technical, operational and business stakeholders to gather requirements, validate findings and resolve ambiguities. - Contribute to tool evaluation