Senior Director Analyst, Cryptography, Remote

What you’ll do:

As a Senior Director Analyst you will meet with clients every day, via video conference and sometimes onsite at Gartner conferences. As an analyst, you will engage with clients to support their most challenging business initiatives, ultimately helping them to make the right decisions for their role and their business. To support these conversations you will research markets, practices and trends and produce written research for Gartner clients to download and apply.

You will collaborate with peers and become a published author on  showcasing your own thought‑leading research, growing your knowledge and your brand as a Gartner Analyst.

• Conduct research and analysis in data security, with a focus on encryption, PKI, post‑quantum cryptography, key and certificate management
• Respond to client questions and deliver high quality actionable advice through a variety of media.
• Write high quality, clear, actionable, content focused on strategic and practical considerations of cryptography, encryption, key and certificate management.
• Predict how crypto‑discovery, key and certificate management markets are developing, help clients in their selection process and provide feedback to vendors on emerging trends in buyer needs.
• Remain ahead of the curve on developments and issues within these specified areas, through peer collaboration from the data security, privacy, and identity and access management teams.
• Proactively work with the wider sales organization and deliver outstanding sales support in order to retain and grow the business

It helps to be obsessed with your topic! Gartner analysts are correctly viewed as THE experts. This means you will need to further develop your knowledge of your markets, vendors, trends, management practices. Gartner Analysts are team players who value expert insights, bold ideas and intellectual courage.

• Subject matter familiarity in cryptography and encryption with the ability to demonstrate understanding of the security, compliance, and business benefits and emerging technologies in those markets.
• Help us see the future & be creative. You must be a lifelong learner with foundational knowledge and experience in cryptography, encryption, PKI, key and certificate management , HSMs and Cybersecurity in general.
• An understanding of data and cloud security concepts and markets, including key and certificate management for human and machine identities and cloud infrastructure.
• Familiarity with the encryption and cryptography management vendors like Entrust, IBM, Keyfactor and Thales
• Familiarity with security considerations for cloud, SaaS and on‑premise environments and how they are impacted by quantum computing and privacy and data security requirements.
• Fundamentals of Cryptography, for example:
• Symmetric Key Cryptography:
  Understanding of algorithms like AES, DES, and their modes of operation.
• Asymmetric Key Cryptography:
  Knowledge of algorithms like RSA, ECC, DH, ML‑KEM, ML‑DSA and SLH‑DSA, and their use in digital signatures and key exchange.
• Hash Functions:
  Familiarity with hash functions like SHA‑2, SHA‑3, and their applications in data integrity and authentication.
• Cryptographic Protocols:
  Understanding of protocols like SSL/TLS, SSH, and others used in secure communications.
• Computer Science and Engineering Knowledge, for example:
• Computer Networks and Security:
  Understanding of how cryptography is applied in various network security protocols.
• Software Development
  
  Skills:
  
  Knowledge of how cryptographic algorithms and protocols are used in applications and familiarity with standard APIs e.g. PKCS#11
• Security Principles and Practices:
• Knowledge of Security Standards:
  Familiarity with standards like FIPS, Common Criteria, and ISO/IEC 27001. CNSA 2.0, DORA.
• Security Architecture and Models:
  Understanding of how cryptographic techniques fit into overall security architectures, for example by using HSMs, Cloud Key Management Services as well as the applicable hybrid and multi‑cloud implementations.
• Current and Emerging Technologies:
• Postquantum Cryptography:
  Awareness of the developments in quantum computing and their implications for current cryptographic…