Welcome to the team: Cryptographic Inventory Analyst (m/f/diverse)

Your tasks
- Providing functional and technical support for establishing, integrating, and continuously developing the bank-wide cryptographic inventory.
- Reviewing and assessing CBOMs provided in the cryptographic inventory, including mandatory attributes, data formats, completeness, timeliness, consistency, and traceability.
- Analysing and resolving data gaps, inconsistencies, misclassifications, and recurring root causes of errors in the cryptographic information provided.
- Performing functional reviews of inventory data received through data sources, interfaces, and integrations, and supporting the functional validation of new data sources and connections.
- Analysing and assessing PQC-readiness information, particularly regarding the cryptographic mechanisms used, technical dependencies, and potential actions required.
- Supporting the maintenance, prioritisation, and continuous development of the PQC transition plan, while advising and assisting affected application teams.
- Deriving and documenting technical findings, and supporting the translation of analysis results into technical requirements, acceptance criteria, and actionable backlog items.
- Collaborating closely with the Product Owner, Technical Product Manager, and other relevant stakeholders to ensure a trustworthy cryptographic inventory.
Your Profile
- High knowledge in Cryptography & PQC Expertise – being able to analyse and assess information provided on PQC readiness, advising affected application teams. Possessing in-depth knowledge of cryptographic mechanisms, PKI, and key management concepts.
- Familiarity with Data Analysis & Validation. Reviewing and assessing CBOMs for completeness, timeliness, consistency, and traceability. Analysing and resolving data gaps, inconsistencies, and recurring root causes of errors.
- Experience with technical Data & expertise in systems - performing functional reviews of inventory data provided via data sources and interfaces. Understanding and working with inventories, information models, APIs, and data quality controls.
- Deriving and documenting technical findings from data analysis and functional reviews.
- Maintaining a basic understanding of regulatory requirements like DORA and the CRA.
- Understand the technical implications of relevant cybersecurity and financial regulations.
In return, we offer:
- Good work-life balance, including 25 days annual paid leave (increasing with 1 day per year up to 31 in total), flexible working hours, work-from-home and work from abroad opportunities;
- Luxury package of additional health and dental insurance;
- Food vouchers in the amount of EUR 80 monthly;
- 6 additional annual days off for exceptional circumstances
- Employee assistance program for psychological, financial and legal consultations;
- Multisport card;
- Annual contribution of EUR 153.39 net per child for a summer camp/school/kindergarten for children up to age of 15;
- Possibilities for building career-advancing skills by covering training/certification courses and conferences based on individual learning and development needs, access to an online learning platform;
- Opportunities for long-term professional development in a stable, 150-year-old company while contributing to the vision of a new, just starting Digital Technology Center;
- Friendly and supportive multicultural environment, open to new opinions and ideas.
Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.
Our Benefits
Learning Platforms; Children Summer Camp Contribution; Employee assistance program; Food vouchers; 6 Exceptional Days Off; 25 up to 31 annual paid leave; Multisport Card; Health& Dental Insurance; Work-life balance; Work internationally
The company
Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.
As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We need motivated people who will join us on this journey and we are looking for a Cryptographic Inventory Analyst (SME) in our Cluster Cyber Defense & Base Services team.
Cluster Cyber Defense & Base services provides 1. LoD activities within the Commerzbank Cyber Security Organsation. In addition, to these operational topics the cluster also develops and operates a variety of security tools which are used by the operational units SOC and Threat Intelligence. The team works together to ensure that valuable functionalities are provided to customers, and that existing products, processes and services are developed and improved in line with customer needs. To achieve this, the team members organise their own activities, working autonomously and with full accountability. Open communication and feedback are key to adopt a fail-fast approach – recognise mistakes and move forward in the right direction.
As a Subject Matter Expert for the Cryptographic Inventory, you are responsible for the functional and technical analysis, validation, and support for the bank-wide cryptographic inventory. You work at the interface between the Product Owner, the Technical Product Manager and affected application teams to ensure a trustworthy and high-quality data foundation for the inventory.
Contact
Apply now with your up-to-date CV in English!
Due to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.

