IT Security Analyst (She/ He/ They)

Capco is a fully independent, global management and technology consultancy with 25 years of experience delivering business consulting, digital transformation, and technology services to Finance and Energy markets.

• At least 5 years of experience in a similar position
• At least 2 years of experience working with IAM projects
• Experience in IT security analysis, security requirements engineering, or security governance within complex environments
• Strong understanding of IAM, PAM, least privilege, and secure access governance principles
• Knowledge of credential types including passwords, SSH keys, API keys, tokens, certificates, and service accounts
• Ability to translate security risks and control gaps into actionable requirements
• Strong communication and documentation skills to collaborate across technical and non-technical teams

Nice to have:

• Experience with secrets management tools such as CyberArk, HashiCorp Vault, or cloud-native solutions
• Familiarity with security frameworks like ISO 27001, NIST, CIS Controls
• Experience in transformation or migration projects involving credential centralization
• Exposure to regulated or highly controlled environments
• Experience supporting enterprise-scale security initiatives

• Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms
• Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks
• Assess control gaps such as unmanaged credentials, hardcoded secrets, and weak auditability, and define remediation approaches
• Define functional and non-functional requirements for centralized secrets management solutions
• Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities

We are looking for Poland based candidate. We strongly advise verifying identities before engaging in recruitment communication. All official Capco communication will be conducted via a Capco recruiter. Data processing information and rights are provided as per GDPR regulations.