Senior Business Analyst, Security Remediation

About the role

Capco is looking for an experienced Business Analyst, Security Remediation to support enterprise-wide technology risk, security remediation and governance initiatives in the banking and payments sector. The role coordinates cloud hardening and security remediation activities, manages audit and regulatory commitments, and works with Information Security, Cloud Engineering, Technology Risk, Compliance, Audit and business stakeholders to turn security requirements into measurable, traceable remediation plans.

Key responsibilities

• Coordinate cloud security hardening initiatives and track remediation of vulnerabilities and control gaps with Cloud Engineering and Information Security teams.
• Develop and maintain remediation plans, milestone schedules, management action plans, risk and issue registers, dependency trackers and commitment logs for internal audits, regulatory reviews and technology risk programs.
• Oversee evidence collection, quality reviews, approvals and submission so remediation outcomes are documented and ready for audit, risk, compliance or regulatory review.
• Produce dashboards, scorecards, governance presentations and executive updates on remediation progress, risks, milestones, blockers and escalations.
• Facilitate governance forums, maintain RACI models, process documentation and decision records, and support consistent ownership and closure-readiness across workstreams.

Required profile

• 7+ years of relevant experience in business analysis, technology governance, security remediation, risk management, audit support, regulatory compliance or enterprise remediation, ideally in complex financial services environments.
• Demonstrable hands-on experience supporting cloud hardening and cloud security remediation, including coordinating control improvements, tracking vulnerabilities and validating evidence of completed remediation.
• Proven experience managing audit findings, regulatory commitments, control deficiencies, management action plans, evidence repositories and closure-readiness activities.
• Strong analytical, facilitation, documentation and communication skills, with experience translating complex requirements into actionable plans and delivering executive reporting.

Required skills

• Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams and SharePoint.
• Bonus points for banking, payments or other regulated financial services experience, familiarity with cloud security, identity and access management, data protection and application security, and frameworks such as NIST, ISO/IEC 27001, CIS Controls or COBIT.
• Bonus points for Jira, Confluence, ServiceNow, Archer, Azure DevOps, Power BI, and certifications such as CBAP, PMI-PBA, PMP, CISA or CRISC.

What we offer

• Base pay of $118,000-$152,000 CAD, with possible annual discretionary/variable bonus.
• Company-paid health, life and disability insurance from Day 1, RRSP with possible employer match, virtual health care, EFAP, parental leave top-up and wellness support.
• Business coach from Day 1 and continuous learning and certification opportunities.