Senior Business Analyst, Security Remediation

Description

At Capco, we're looking for an experienced Business Analyst, Security Remediation to support enterprise-wide technology risk, security remediation, and governance initiatives within the banking and payments sector.

You'll play a key role in coordinating cloud hardening and security remediation activities, managing audit and regulatory commitments, and ensuring remediation outcomes are measurable, traceable, and supported by robust evidence.

Working closely with Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders, you'll help translate complex security and control requirements into actionable remediation plans, strengthen accountability, and provide clear reporting to senior leadership.

This role requires hands-on experience supporting cloud hardening initiatives and security remediation programs, alongside strong business analysis, governance, stakeholder coordination, and delivery management capabilities.

Responsibilities

• Drive Cloud Hardening & Security Remediation: Coordinate cloud security hardening initiatives, track remediation of security vulnerabilities and control gaps, and work with Cloud Engineering and Information Security teams to ensure remediation activities align with enterprise security standards and risk requirements.
• Manage Remediation Governance: Develop and maintain enterprise remediation plans, milestone schedules, management action plans, risk and issue registers, dependency trackers, and commitment logs supporting internal audits, regulatory reviews, and technology risk programs.
• Coordinate Evidence & Audit Readiness: Oversee evidence collection, quality reviews, approvals, and submission processes, ensuring remediation outcomes are appropriately documented, traceable, and ready for audit, risk, compliance, or regulatory assessment.
• Deliver Executive Reporting & Insights: Produce dashboards, scorecards, governance presentations, and concise executive updates highlighting remediation progress, cloud security risks, milestone performance, blockers, and decisions requiring escalation.
• Strengthen Controls & Stakeholder Accountability: Facilitate cross-functional governance forums, maintain RACI models, process documentation, and decision records, and support consistent ownership, escalation, and closure-readiness practices across remediation workstreams.

Requirements

• 7+ years of relevant experience in business analysis, technology governance, security remediation, risk management, audit support, regulatory compliance, or enterprise remediation programs, ideally within complex financial services environments.
• Mandatory Cloud Hardening Experience: Demonstrable hands-on experience supporting cloud hardening and cloud security remediation initiatives, including coordinating security control improvements, tracking vulnerabilities or configuration weaknesses, managing remediation milestones, and validating evidence of completed remediation.
• Remediation & Control Governance Expertise: Proven experience managing audit findings, regulatory commitments, control deficiencies, management action plans, evidence repositories, and closure-readiness activities, with a strong understanding of issue management, control ownership, and evidence traceability.
• Business Analysis & Stakeholder Management: Strong analytical, facilitation, documentation, and communication skills, with experience translating complex technology and security requirements into actionable plans, managing multiple workstreams, resolving dependencies, and preparing executive-level reporting.
• Reporting & Collaboration Tools: Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams, and SharePoint, combined with the ability to maintain accurate governance documentation, manage competing priorities, and escalate delivery risks appropriately.
• Bonus Points For
• Experience within banking, payments, or other highly regulated financial services environments, including regulatory examinations, audit remediation, MRA programs, and enterprise technology risk initiatives.
• Familiarity with cloud security, infrastructure security, identity and access management, data protection, application security, and operational risk controls.
• Working knowledge of security and governance frameworks such as NIST, ISO/IEC 27001, CIS Controls, COBIT, or comparable enterprise risk and control frameworks.
• Experience using Jira, Confluence, ServiceNow, Archer, Azure DevOps, Power BI, or comparable workflow, governance, evidence-management, and reporting platforms.
• Relevant professional certifications such as CBAP, PMI-PBA, PMP, CISA, CRISC, or equivalent qualifications.

Conditions

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

Canada Pay Transparency

$118,000 - $152,000 CAD

Benefits

• Deliver high-impact technology solutions for Tier 1 financial institutions.
• Work in a collaborative, flat, and entrepreneurial consulting culture.
• Access continuous learning, training, and industry certifications.
• Be part of a team shaping the future of digital financial services.
• Help shape the future of digital transformation across FS & Energy.
• We offer a competitive, people-first benefits package designed to support every aspect of your life:
• Comprehensive Benefits Coverage: 100% company-paid health, life, and disability insurance effective from Day 1 of employment.
• Retirement Savings Program: Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.
• Virtual Health Care: Company-paid program available to all employees and their dependents/partners.
• Employee & Family Assistance Program (EFAP): Company-paid support services for employees and their dependents/partners.
• Parental Leave Top-Up: Enhanced parental leave benefits available from Day 1 of employment.
• New Parent Gift: A company-sponsored gift to celebrate the arrival of a new child.
• Wellness Support: Fitness reimbursement benefit to promote health and well-being.
• Business Coach from Day 1: Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional goals at Capco.
• Inclusion at Capco
• We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.
• Use of Artificial Intelligence in Talent Acquisition
• At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.
• AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.
• Why This Role Is Open
• We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.