Business Analyst – IT Security & Governance

About the role

The Business Analyst will work within OPTrust's IT Security and Governance team, part of the Technology Risk and Control department. You will drive business process re‑engineering, gather requirements, support IT audit activities and lead routine projects while ensuring compliance with IT general controls.

Key responsibilities

• Gather evidence for internal and external IT audits, document findings and develop remediation plans.
• Manage the change management process, organize CAB meetings, review RFCs and communicate risks.
• Conduct periodic access‑rights reviews and enforce the principle of least privilege.
• Document business requirements, perform data analysis and act as a bridge between business and technical teams.
• Lead routine project phases, develop schedules, and ensure adherence to OPTrust’s project methodology.
• Create and maintain reports and dashboards using Power BI and Excel.

Required profile

• Post‑secondary education in Technology Risk, Audit or a related field.
• 2–4 years of experience in IT audit, change management, access management or IT governance.
• Proven ability to produce policies, procedures, process maps and training materials.
• Strong communication, analytical and project‑management skills.
• Relevant certifications such as CISA, CRISC, CIA or CISSP are preferred.

Required skills

• Power BI
• Excel
• IT General Controls (ITGC)
• Change Management
• Access Management
• IT Audit techniques
• Data analysis

What we offer

• Hybrid work model with flexible scheduling.
• Comprehensive health, dental, vision and pension benefits.
• Professional development opportunities including LinkedIn Learning, tuition reimbursement and mentorship programs.
• Competitive vacation package and work‑life balance days.