Business Analyst Cybersecurity

Context and mandate

Responsibilities

• Develop the 2027–2029 roadmap across cryptography, DLP, PQC, and AI security.
• Gather and formalize business and functional requirements for post-quantum transition and cryptographic agility, aligning them with standards and controls.
• Document processes and use cases affected by cryptographic changes with technical teams.
• Organize information for quantum risk assessment and migration prioritization.
• Document migration scenarios, track requirements, and facilitate business-security collaboration.
• Help define requirements and document processes for DLP and AI security.
• Support the 2026 control maturity assessment across all four pillars.
• Prepare intake deliverables for 2027 demand management and budget assessment; coordinate relevant stakeholders.

Requirements

• Proven business analysis experience, including requirements elicitation and documentation, process documentation, and use case development.
• General understanding of security risks, data protection, and compliance considerations.
• Experience with IT modernization projects, ideally in cybersecurity, and ability to work with multidisciplinary teams.
• Ability to coordinate stakeholders and produce structured deliverables within tight timelines.
• Proficiency using generative AI tools, such as GitHub Copilot and writing assistants, for documentation, synthesis, and requirements structuring.

Assets

• Security or data protection experience is an asset.
• Exposure to cryptography, PKI, or certificate lifecycle management is an asset; deep cryptography expertise is not required.
• Exposure to DLP or AI security is an asset.
• Familiarity with OSFI B-13, E-21, E-23, or Québec's Law 25 is an asset.
• Experience with SAFe, Jira, or Confluence is an asset.