Senior Business Analyst, Security Remediation

The role

You will support enterprise-wide technology risk, security remediation, and governance initiatives within the banking and payments sector. You will coordinate cloud hardening, manage audit and regulatory commitments, and provide reporting to senior leadership.

What you will do

• Coordinate cloud security hardening initiatives
• Track remediation of security vulnerabilities and control gaps
• Develop and maintain enterprise remediation plans, milestone schedules, and risk registers
• Oversee evidence collection, quality reviews, and submission processes
• Produce dashboards, scorecards, and executive updates
• Facilitate cross-functional governance forums
• Maintain RACI models, process documentation, and decision records

Required qualifications

• 7+ years of relevant experience in business analysis, technology governance, security remediation, risk management, audit support, regulatory compliance, or enterprise remediation programs
• Hands-on experience supporting cloud hardening and cloud security remediation initiatives
• Experience managing audit findings, regulatory commitments, control deficiencies, and management action plans
• Strong analytical, facilitation, documentation, and communication skills
• Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams, and SharePoint

Nice to have

• Experience within banking, payments, or other highly regulated financial services environments
• Familiarity with cloud security, infrastructure security, identity and access management, data protection, application security, and operational risk controls
• Working knowledge of security and governance frameworks such as NIST, ISO/IEC 27001, CIS Controls, COBIT, or comparable enterprise risk and control frameworks
• Experience using Jira, Confluence, ServiceNow, Archer, Azure DevOps, Power BI, or comparable platforms
• Relevant professional certifications such as CBAP, PMI-PBA, PMP, CISA, CRISC, or equivalent qualifications

Benefits

• 100% company-paid health, life, and disability insurance effective from Day 1
• Registered Retirement Savings Plan (RRSP) with option for matching employer contribution
• Company-paid Virtual Health Care for employees and dependents/partners
• Company-paid Employee & Family Assistance Program (EFAP) for employees and dependents/partners
• Enhanced parental leave benefits available from Day 1
• Company-sponsored new parent gift
• Fitness reimbursement benefit
• Personalized one-on-one business coaching from Day 1

About the company

Capco is a consulting firm with a collaborative, flat, and entrepreneurial culture. They deliver technology solutions for Tier 1 financial institutions.