About this role
YOUR JOB IN A NUTSHELL Join our Key, Certificate, and Key Management squad within the Production Security BE tribe , a team of 15 experts based in Belgium. As a Cryptographic Security Expert , you’ll specialize in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets via Hashicorp Vault . Your mission? To secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with EU/Group regulations (PSD2, PCI) and industry standards. You’ll operate and support Hardware Security Modules (HSMs) like Adyton and nCipher , enabling a trustworthy environment for both internal and external customers. Here, you’ll be the go-to partner for stakeholders, delivering cost-efficient, reliable security solutions that keep the bank and its clients safe. AND IN DETAIL General Manage the lifecycle of cryptographic keys, digital certificates, and application secrets including rotation, revocation, and access control. Monitor and maintain HSM infrastructures (Adyton, nCipher, mainframe TKE) to ensure high availability and compliance. Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage. Act as a Crypto Design Authority , advising on cryptographic standards, algorithms, and best practices (e.g., NIST, PCI-DSS, PSD2 ). Lead or contribute to strategic projects, including: Post-Quantum Cryptography: Assess risks and contribute to the migration of quantum-resistant solutions. EKU Readiness: Prepare systems for Extended Key Usage (EKU) compliance. HSM Lifecycle Management (LCM) : Contribute to the design of service patterns and infrastructure requirements. PKI Convergence : Streamline Public Key Infrastructure across the bank. Crypto Agility : Design flexible frameworks to adapt to evolving threats/standards and assist in automating workflows (e.g., IoT device onboarding ). Platform Integration : Align with Group tools ( Certis, Horizon ). Partner with COE Security, Group Security, IT architects, and IT application owners to translate regulatory and business requirements into technical solutions. YOUR TALENTS AND COMPETENCES Collaboration and results drive you : You work closely with stakeholders ( IT architects, application owners, COE & Group Security ) to deliver tangible security solutions that meet both business needs and regulatory demands without losing sight of operational realities. Client-centric by design : Whether supporting internal teams or external partners, you translate complex cryptographic requirements (e.g., PSD2, PCI-DSS ) into practical, user-friendly implementations that ensure trust and compliance. Deep IT security expertise : Your foundation is technical mastery of HSMs (Adyton/nCipher), PKI, Hashicorp Vault, and cryptographic standards (NIST) , paired with sharp operational oversight of high-availability infrastructures. Proactive and analytical : Beyond spotting risks (e.g., in post-quantum cryptography or EKU readiness ), you proactively enhance processes (e.g., improving key and certificate rotation protocols). Agile in action : In a fast-evolving landscape (e.g., crypto-agility, IoT onboarding automation ), you anticipate change, prioritize flexibly, and contribute to iterative enhancements without compromising production stability. Bridging tech and business : You turn abstract security requirements (e.g., from COE Security ) into feasible IT solutions, balancing cost efficiency, compliance, and developer practicality. Languages : You communicate fluently in English (spoken and written) and have basic French (spoken). Tools : Proficiency in Microsoft Office (Word, Excel, PowerPoint) is mandatory. Scripting ( Python, Bash ), Power BI , and Rally are a plus.