IT Security Analyst

Capco is a fully independent, global management and technology consultancy serving Finance and Energy markets for 25 years. They deliver business consulting, digital transformation, and technology services, helping clients reduce costs and manage risk and regulatory change.

• At least 5 years of experience in a similar IT security analysis role
• At least 2 years of experience working with IAM projects
• Experience in security requirements engineering or governance in complex environments
• Strong understanding of IAM, PAM, least privilege, and secure access governance principles
• Knowledge of credential types such as passwords, SSH keys, API keys, tokens, certificates, and service accounts
• Ability to translate security risks and control gaps into actionable requirements
• Strong communication and documentation skills to collaborate across technical and non-technical teams

Nice to have:

• Experience with secrets management tools such as CyberArk, HashiCorp Vault, or cloud-native solutions
• Familiarity with security frameworks like ISO 27001, NIST, and CIS Controls
• Experience in transformation or migration projects involving credential centralization
• Exposure to regulated or highly controlled environments
• Experience supporting enterprise-scale security initiatives

• Conduct end-to-end analysis of secrets and credential management across applications, infrastructure, and platforms
• Identify, classify, and document secrets including ownership, usage, storage, lifecycle stage, and risks
• Assess control gaps such as unmanaged credentials, hardcoded secrets, and weak auditability, defining remediation approaches
• Define functional and non-functional requirements for centralized secrets management solutions
• Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities

We are looking for Poland based candidate.

We have been informed of several recruitment scams targeting the public. All official Capco communication will be conducted via a Capco recruiter.