YOUR JOB IN A NUTSHELL

Join our Key, Certificate, and Key Management squad within the Production Security BE tribe, a team of 15 experts based in Belgium. As a Cryptographic Security Expert, you’ll specialize in the lifecycle management of cryptographic keys, certificates (internal/group/public), and application secrets via Hashicorp Vault. 

Your mission? To secure electronic transactions, authentications, and cloud-hosted applications while ensuring full compliance with EU/Group regulations (PSD2, PCI) and industry standards.

You’ll operate and support Hardware Security Modules (HSMs) like Adyton and nCipher, enabling a trustworthy environment for both internal and external customers. Here, you’ll be the go-to partner for stakeholders, delivering cost-efficient, reliable security solutions that keep the bank and its clients safe.

AND IN DETAIL

• Manage the lifecycle of cryptographic keys, digital certificates, and application secrets  including rotation, revocation, and access control.
• Monitor and maintain HSM infrastructures (Adyton, nCipher, mainframe TKE) to ensure high availability and compliance.
• Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.
• Act as a Crypto Design Authority, advising on cryptographic standards, algorithms, and best practices (e.g., NIST, PCI-DSS, PSD2).
• Lead or contribute to strategic projects, including:
  • Post-Quantum Cryptography: Assess risks and contribute to the migration of quantum-resistant solutions.
  • EKU Readiness: Prepare systems for Extended Key Usage (EKU) compliance.
  • HSM Lifecycle Management (LCM): Contribute to the design of service patterns and infrastructure requirements.
  • PKI Convergence: Streamline Public Key Infrastructure across the bank.
  • Crypto Agility: Design flexible frameworks to adapt to evolving threats/standards and assist in automating workflows (e.g., IoT device onboarding).
  • Platform Integration: Align with Group tools (Certis, Horizon).
• Partner with COE Security, Group Security, IT architects, and IT application owners to translate regulatory and business requirements into technical solutions.

YOUR TALENTS AND COMPETENCES

• Collaboration and results drive you: You work closely with stakeholders (IT architects, application owners, COE & Group Security) to deliver tangible security solutions that meet both business needs and regulatory demands without losing sight of operational realities.
• Client-centric by design: Whether supporting internal teams or external partners, you translate complex cryptographic requirements (e.g., PSD2, PCI-DSS) into practical, user-friendly implementations that ensure trust and compliance.
• Deep IT security expertise: Your foundation is technical mastery of HSMs (Adyton/nCipher), PKI, Hashicorp Vault, and cryptographic standards (NIST), paired with sharp operational oversight of high-availability infrastructures.
• Proactive and analytical: Beyond spotting risks (e.g., in post-quantum cryptography or EKU readiness), you proactively enhance processes (e.g., improving key and certificate rotation protocols).
• Agile in action: In a fast-evolving landscape (e.g., crypto-agility, IoT onboarding automation), you anticipate change, prioritize flexibly, and contribute to iterative enhancements without compromising production stability.
• Bridging tech and business: You turn abstract security requirements (e.g., from COE Security) into feasible IT solutions, balancing cost efficiency, compliance, and developer practicality.
• Languages: You communicate fluently in English (spoken and written) and have basic French (spoken).
• Tools: Proficiency in Microsoft Office (Word, Excel, PowerPoint) is mandatory. Scripting (Python, Bash), Power BI, and Rally are a plus.

WHAT WE HAVE TO OFFER

OUR IMPACT

As a company, we implement concrete and sustainable solutions to reduce our environmental footprint, such as saving paper and resources, recycling our waste, encouraging the use of green transport, buildings that are designed and managed to limit our impact, etc.

YOUR CAREER PERSPECTIVES

The departments that make up BNP Paribas Fortis cover a wide range of activities. You will therefore have many opportunities for ‘horizontal’ and ‘vertical’ career development.

OUR OFFER

You’ll enjoy a permanent contract with an attractive salary package. You'll be working at our Brussels headquarters. We support your work-life balance by offering a mixture of in-person and remote work (50%), among other things.

OUR ENGAGEMENT

At BNP Paribas Fortis, we want to attract and retain all talent, whatever their gender, age, background or sexual orientation, and irrespective of whether they are living with a disability, as all persons have their own experiences and their own identity. All of our full-time vacancies are also open to candidates wishing to work on an 80% or 90% full-time equivalent basis.

 If the function is categorized as a banking services provider function (cf. Law of 22 April 2019 establishing an oath and a disciplinary regime for the banking sector), you will also need to provide us with a 'certificate of absence of professional ban' from the FSMA confirming that you are not professionally disqualified.

TEMPTED BY THE CHALLENGE?

A first selection is made based on your CV and motivation letter. Are we convinced that you are the right candidate? Then we will contact you.

Good luck!

Is this position not for you, but do you know someone who is cut out for this job? Feel free to share it with friends and family!