Senior Business Analyst, Security Remediation At Capco, we're looking for an experienced Business Analyst, Security Remediation to support enterprise-wide technology risk, security remediation, and governance initiatives within the banking and payments sector.

You're discussing the attentive role. The snippet includes support, traceable outcomes, and robust evidence.

Working closely with Information Security, Cloud Engineering, Technology Risk, Compliance, Audit, and business stakeholders, you'll help translate complex security and control requirements into actionable remediation plans, strengthen accountability, and provide clear reporting to senior leadership.

This role requireshands-on experience supporting cloud hardening initiatives and security remediation programs, alongside strong business analysis, governance, stakeholder coordination, and delivery management capabilities.

What You'll Do Drive Cloud Hardening & Security Remediation:

Coordinate cloud security hardening initiatives, track remediation of security vulnerabilities and control gaps, and work with Cloud Engineering and Information Security teams to ensure remediation activities align with enterprise security standards and risk requirements.

Manage Remediation Governance:

Develop and maintain enterprise remediation plans, milestone schedules, management action plans, risk and issue registers, dependency trackers, and commitment logs supporting internal audits, regulatory reviews, and technology risk programs.

Coordinate Evidence & Audit Readiness:

Oversee evidence collection, quality reviews, approvals, and submission processes, ensuring remediation outcomes are appropriately documented, traceable, and ready for audit, risk, compliance, or regulatory assessment.





Deliver Executive Reporting & Insights:

Produce dashboards, scorecards, governance presentations, and concise executive updates highlighting remediation progress, cloud security risks, milestone performance, blockers, and decisions requiring escalation.

Strengthen Controls & Stakeholder Accountability:

Facilitate cross-functional governance forums, maintain RACI models, process documentation, and decision records, and support consistent ownership, escalation, and closure-readiness practices across remediation workstreams.

What We're Looking For 7+ years of relevant experience

in business analysis, technology governance, security remediation, risk management, audit support, regulatory compliance, or enterprise remediation programs, ideally within complex financial services environments.

Mandatory Cloud Hardening Experience:

Demonstrable hands-on experience supporting cloud hardening and cloud security remediation initiatives, including coordinating security control improvements, tracking vulnerabilities or configuration weaknesses, managing remediation milestones, and validating evidence of completed remediation.

Remediation & Control Governance Expertise:

Proven experience managing audit findings, regulatory commitments, control deficiencies, management action plans, evidence repositories, and closure-readiness activities,



with a solid understanding of issue management, control ownership, and evidence traceability.

Business Analysis & Stakeholder Management:

Strong analytical, facilitation, documentation, and communication skills, with experience translating complex technology and security requirements into actionable plans, managing multiple workstreams, resolving dependencies, and preparing executive-level reporting.

Reporting & Collaboration Tools:

Advanced proficiency with Microsoft Excel, PowerPoint, Word, Teams, and SharePoint, combined with the ability to maintain accurate governance documentation, manage competing priorities, and elevate delivery risks appropriately.

Bonus Points For Experience within banking, payments, or other highly regulated financial services environments, including regulatory examinations, audit remediation, MRA programs, and enterprise technology risk initiatives.

Familiarity with cloud security, infrastructure security, identity and access management, data protection, application security, and operational risk controls.

Working knowledge of security and governance frameworks such as NIST, ISO/IEC 27001, CIS Controls, COBIT, or comparable enterprise risk and control frameworks.

Experience using Jira, Confluence, ServiceNow, Archer, Azure DevOps, Power BI, or comparable workflow, governance, evidence-management, and reporting platforms.

Relevant professional certifications such as CBAP, PMI-PBA, PMP, CISA, CRISC, or equivalent qualifications.

Why Join Capco Deliver high-impact technology solutions for Tier 1 financial institutions.

Work in a collaborative, flat, and entrepreneurial con

📌 Senior Business Analyst, Security Remediation (Toronto)
🏢 CAPCO
📍 Toronto