Cryptographic Inventory Analyst

Commerzbank is a leading international commercial bank with branches and offices in almost 50 countries. The world is changing, becoming digital, and so are we. We are leaving the traditional bank behind us and we are choosing to move forward as a digital enterprise.
As part of this strategy, Commerzbank continues the expansion of its Digital Technology Center in Sofia, Bulgaria. We are looking for motivated people who will join us on this journey.

Our Cluster Cyber Defense & Base Services team is looking for:

Cryptographic Inventory Analyst (SME)

Your responsibilities:

• Providing functional and technical support for establishing, integrating, and continuously developing the bank-wide cryptographic inventory.
• Reviewing and assessing CBOMs provided in the cryptographic inventory, including mandatory attributes, data formats, completeness, timeliness, consistency, and traceability.
• Analysing and resolving data gaps, inconsistencies, misclassifications, and recurring root causes of errors in the cryptographic information provided.
• Performing functional reviews of inventory data received through data sources, interfaces, and integrations, and supporting the functional validation of new data sources and connections.
• Analysing and assessing PQC-readiness information, particularly regarding the cryptographic mechanisms used, technical dependencies, and potential actions required.
• Supporting the maintenance, prioritisation, and continuous development of the PQC transition plan, while advising and assisting affected application teams.
• Deriving and documenting technical findings, and supporting the translation of analysis results into technical requirements, acceptance criteria, and actionable backlog items.
• Collaborating closely with the Product Owner, Technical Product Manager, and other relevant stakeholders to ensure a trustworthy cryptographic inventory.

Your skills and experience:

• High knowledge in Cryptography & PQC Expertise – being able to analyse and assess information provided on PQC readiness, advising affected application teams. Possessing in-depth knowledge of cryptographic mechanisms, PKI, and key management concepts.
• Familiarity with Data Analysis & Validation. Reviewing and assessing CBOMs for completeness, timeliness, consistency, and traceability. Analysing and resolving data gaps, inconsistencies, and recurring root causes of errors.
• Experience with technical Data & expertise in systems - performing functional reviews of inventory data provided via data sources and interfaces. Understanding and working with inventories, information models, APIs, and data quality controls.
• Deriving and documenting technical findings from data analysis and functional reviews.
• Maintaining a basic understanding of regulatory requirements like DORA and the CRA.
• Understand the technical implications of relevant cybersecurity and financial regulations.

Commerzbank is proud to be an equal opportunity employer, committed to creating a diverse environment. All qualified applicants will receive consideration for employment without regard to gender, race, color, national origin, religion, gender identity or expression, sexual orientation, genetics, disability, age, or any other characteristics.

Challenge accepted? Apply now with your up-to-date CV in English!

Due to the high volume of applications, we contact only the candidates who best match the role requirements. If you do not hear from us within 14 days, please consider that we won't proceed with your application at this stage.

Our offer

25 days paid leave

1 additional day for each year

Health Insurance

EUR 80

Food vouchers

6 days sick leave

Without sick leave sheet

Flexible work arrangements

Home Office Policy

Annual Contribution

for children summer camp

Sports and Wellbeing

Multisport

Initiatives