Business Analyst, Security Education

Role overview

Responsibilities

• Analyze phishing simulation results, user behavior, and program metrics; identify risks and recommend actions.
• Design, build, test, and deploy campaigns aligned with threat intelligence and emerging cyber risks.
• Gather, document, and validate requirements for program enhancements, process improvements, and automation.
• Coordinate campaign reviews and approvals with Risk, Compliance, HR, Technology, and business stakeholders.
• Validate data, investigate anomalies, resolve reporting discrepancies, and manage remediation training enrollment, completion tracking, and escalation.
• Create executive dashboards, reports, presentations, and risk summaries; investigate high-risk activity and coordinate mitigation.
• Respond to inquiries, improve efficiency through automation and process redesign, maintain program documentation and audit evidence, and support strategic program initiatives.

Qualifications

• 5–7 years of experience in business analysis, cybersecurity, risk management, learning programs, or a related field.
• Strong analytical and data-management skills, including advanced Excel capabilities.
• Experience gathering business requirements and supporting technology-enabled initiatives.
• Excellent communication and stakeholder management skills.
• Knowledge of phishing, social engineering, security awareness, and cyber risk concepts.
• Experience with learning management systems such as Workday.
• Proofpoint, Power BI, SSCP, or CISSP are nice to have.

Pay

• The stated salary range is CAD 70,000–150,000; the posting identifies the pay type as salaried but does not specify a compensation cadence.

Benefits

• Benefits may include health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, performance-based incentives, discretionary bonuses, and other rewards.

About BMO