Cybersecurity BA: Risk & Vulnerability for AI

Highspring; Montreal; On-site; CAD 75,000 - 110,000; Full time

Job summary

Highspring seeks a Cybersecurity Business Analyst with expertise in risk and vulnerability management to support process improvements, define requirements, and formalize security controls aligned with organizational needs.

The consultant will help teams identify gaps, assess business impacts, and prioritize risk reduction initiatives, including documenting risks related to generative AI, LLMs, and related security controls.

Qualifications

• Proven experience as a business analyst in a cybersecurity environment.
• Strong understanding of technology risk and vulnerability management practices.
• Experience gathering requirements, facilitating workshops, documenting processes, and writing business and functional requirements.
• Ability to translate security issues into actionable requirements and measurable acceptance criteria.
• Understanding of the vulnerability management lifecycle: identification, assessment, prioritization, remediation, monitoring.
• Ability to assess business impacts and support initiative prioritization.
• Strong collaboration and communication skills, explaining complex issues to business and technical stakeholders and producing clear Deliverables.

Responsibilities

• Gather, analyze, and document business needs related to cybersecurity risk and vulnerability management.
• Map current processes, identify gaps, and define target risk management processes.
• Translate security policies and business needs into functional requirements and acceptance criteria.
• Structure information to assess impacts, determine risk severity, and document residual risks.
• Define prioritization criteria based on asset criticality, exposure, and business impact.
• Document corrective actions, timelines, and escalation mechanisms.
• Define indicators and dashboards to monitor risk exposure and remediation progress.
• Assess impacts of proposed changes and justify initiatives by value, risk reduction, and effort.
• Support risk analysis for AI use cases and document security requirements.

Skills

Cybersecurity BA

Risk & vulnerability

Requirements gathering

Workshop facilitation

Process documentation

Acceptance criteria

Stakeholder communication

Job description

Highspring seeks a Cybersecurity Business Analyst with expertise in risk and vulnerability management to support process improvements, define requirements, and formalize security controls aligned with organizational needs.

The consultant will help teams identify gaps, assess business impacts, and prioritize risk reduction initiatives, including documenting risks related to generative AI, LLMs, and related security controls.