Senior Business Analyst, Security Remediation

Capco; Toronto; On-site; CAD 118,000 - 152,000; Full time

Job summary

Capco is seeking an experienced Senior Business Analyst, Security Remediation to support enterprise-scale technology risk, security remediation, and governance initiatives within the banking and payments sector.

You will collaborate with Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders to translate complex security needs into actionable remediation plans and provide clear reporting to senior leadership.

Qualifications

• 7+ years of experience in business analysis, governance, risk, or remediation programs within financial services.
• Hands-on cloud hardening experience and security remediation delivery.
• Strong governance, evidence management, and audit-readiness capabilities.

Responsibilities

• Drive Cloud Hardening & Security Remediation: coordinate remediation of vulnerabilities and align with security standards.
• Manage Remediation Governance: maintain plans, milestones, action logs, and risk registers.
• Coordinate Evidence & Audit Readiness: oversee evidence collection and approvals for audits.
• Deliver Executive Reporting & Insights: create dashboards and executive updates on progress.
• Strengthen Controls & Stakeholder Accountability: support cross-functional governance and ownership.

Skills

Business analysis

Stakeholder management

Governance

Delivery management

Communication

Education

CBAP

PMI-PBA

PMP

CISA

CRISC

Tools

Jira

Confluence

ServiceNow

Archer

Azure DevOps

Power BI

Job description

Senior Business Analyst, Security Remediation

At Capco, we're looking for an experienced Business Analyst, Security Remediation to support enterprise-wide technology risk, security remediation, and governance initiatives within the banking and payments sector.

You're discussing the attentive role. The snippet includes support, traceable outcomes, and robust evidence.

Working closely with Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders, you'll help translate complex security and control requirements into actionable remediation plans, strengthen accountability, and provide clear reporting to senior leadership.

This role requireshands-on experience supporting cloud hardening initiatives and security remediation programs, alongside strong business analysis, governance, stakeholder coordination, and delivery management capabilities.

What You'll Do

Drive Cloud Hardening & Security Remediation: Coordinate cloud security hardening initiatives, track remediation of security vulnerabilities and control gaps, and work with Cloud Engineering and Information Security teams to ensure remediation activities align with enterprise security standards and risk requirements.

Manage Remediation Governance: Develop and maintain enterprise remediation plans, milestone schedules, management action plans, risk and issue registers, dependency trackers, and commitment logs supporting internal audits, regulatory reviews, and technology risk programs.

Coordinate Evidence & Audit Readiness: Oversee evidence collection, quality reviews, approvals, and submission processes, ensuring remediation outcomes are appropriately documented, traceable, and ready for audit, risk, compliance, or regulatory assessment.

Deliver Executive Reporting & Insights: Produce dashboards, scorecards, governance presentations, and concise executive updates highlighting remediation progress, cloud security risks, milestone performance, blockers, and decisions requiring escalation.

Strengthen Controls & Stakeholder Accountability: Facilitate cross-functional governance forums, maintain RACI models, process documentation, and decision records, and support consistent ownership, escalation, and closure-readiness practices across remediation workstreams.

What We're Looking For

7+ years of relevant experience in business analysis, technology governance, security remediation, risk management, audit support, regulatory compliance, or enterprise remediation programs, ideally within complex financial services environments.

Mandatory Cloud Hardening Experience: Demonstrable hands-on experience supporting cloud hardening and cloud security remediation initiatives, including coordinating security control improvements, tracking vulnerabilities or configuration weaknesses, managing remediation milestones, and validating evidence of completed remediation.

Remediation & Control Governance Expertise: Proven experience managing audit findings, regulatory commitments, control deficiencies, management action plans, evidence repositories, and closure-readiness activities, with a strong understanding of issue management, control ownership, and evidence traceability.

Business Analysis & Stakeholder Management: Strong analytical, facilitation, documentation, and communication skills, with experience translating complex technology and security requirements into actionable plans, managing multiple workstreams, resolving dependencies, and preparing executive-level reporting.

Reporting & Collaboration Tools: Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams, and SharePoint, combined with the ability to maintain accurate governance documentation, manage competing priorities, and elevate delivery risks appropriately.

Bonus Points For

Experience within banking, payments, or other highly regulated financial services environments, including regulatory examinations, audit remediation, MRA programs, and enterprise technology risk initiatives.

Familiarity with cloud security, infrastructure security, identity and access management, data protection, application security, and operational risk controls.

Working knowledge of security and governance frameworks such as NIST, ISO/IEC 27001, CIS Controls, COBIT, or comparable enterprise risk and control frameworks.

Experience using Jira, Confluence, ServiceNow, Archer, Azure DevOps, Power BI, or comparable workflow, governance, evidence-management, and reporting platforms.

Relevant professional certifications such as CBAP, PMI-PBA, PMP, CISA, CRISC, or equivalent qualifications.

Why Join Capco

Deliver high-impact technology solutions for Tier 1 financial institutions.

Work in a collaborative, flat, and entrepreneurial consulting culture.

Access continuous learning, training, and industry certifications.

Be part of a team shaping the future of digital financial services.

Help shape the future of digital transformation across FS & Energy.

We offer a competitive, people-first benefits package designed to support every aspect of your life:

Comprehensive Benefits Coverage: 100% company-paid health, life, and disability insurance effective from Day 1 of employment.

Retirement Savings Program: Registered Retirement Savings Plan (RRSP) with the option of receiving a matching employer contribution.

Virtual Health Care: Company-paid program available to all employees and their dependents/partners.

Employee & Family Assistance Program (EFAP): Company-paid support services for employees and their dependents/partners.

Parental Leave Top-Up: Enhanced parental leave benefits available from Day 1 of employment.

New Parent Gift: A company-sponsored gift to celebrate the arrival of a new child.

Wellness Support: Fitness reimbursement benefit to promote health and well-being.

Business Coach from Day 1: Personalized one-on-one coaching to support career growth, accelerate development, and help achieve your professional objectives at Capco.

Inclusion at Capco

We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know – we'll be happy to help. We value each person's unique perspective and contribution. At Capco, we believe that being yourself is your greatest strength. Our #BeYourselfAtWork culture encourages individuality and collaboration – a mindset that shapes how we work with clients and each other every day.

Use of Artificial Intelligence in Talent Acquisition

At Capco, we use artificial intelligence (AI) tools to support and enhance several parts of talent acquisition. This includes using AI-enabled features within LinkedIn to help source potential candidates, speeding up routine recruitment communications such as emails and creating compelling and brand-aligned job postings that accurately reflect role requirements, and AI-scheduling applications to improve the efficiency of interview coordination.

AI is used as a support tool only. All hiring decisions are made by talent acquisition and hiring teams.

Why This Role Is Open

We are currently hiring for this role due to an existing or newly created vacancy within our organization. This position is open as part of our ongoing business needs, and we are actively reviewing applications to fill this role with a qualified candidate who can make an immediate impact.

Pay Transparency

The salary range for this position is listed below. Additionally, this position may also be eligible to receive an annual discretionary/variable bonus payment.

Capco is committed to providing fair and equitable compensation to our people. Our compensation policies and salary ranges are designed to allow our people to progress through the salary range as they demonstrate strong performance and develop in their role over time. The base pay offered to selected candidates will be within the salary range and the placement will vary based upon a variety of factors, including, but not limited to job-related knowledge, skills, experience and internal equity.

$118,000 - $152,000 CAD