Business Analyst, Security Education

Role overview

Key responsibilities

• Analyze phishing simulation results, user behavior, and program metrics to identify risks, opportunities, and recommendations.
• Design, test, and deploy phishing campaigns aligned with threat intelligence and emerging cyber risks.
• Gather and validate business requirements for enhancements, process improvements, and automation; coordinate campaigns with cross-functional stakeholders.
• Validate program data, investigate anomalies, and resolve reporting discrepancies.
• Manage remediation training enrollment, completion tracking, and escalation processes.
• Prepare executive dashboards, reports, presentations, and risk summaries for leaders and governance committees.
• Investigate high-risk activity and coordinate mitigation; respond to employee and management inquiries.
• Improve processes through automation and redesign; maintain documentation, procedures, controls, and audit evidence.
• Support strategic initiatives to improve Security Education program effectiveness and maturity.

Qualifications

• 5–7 years of experience in Business Analysis, Cyber Security, Risk Management, Learning Programs, or a related field.
• Strong analytical and data-management skills, including advanced Excel.
• Experience gathering business requirements and supporting technology-enabled initiatives.
• Excellent communication and stakeholder management skills.
• Knowledge of phishing, social engineering, security awareness, and cyber risk concepts.
• Experience with learning management systems such as Workday.

Nice to have

• Proofpoint, Power BI, SSCP, or CISSP.

Compensation

• The stated salary range is $70,000–$150,000; the source identifies the pay type as salaried but does not specify a pay cadence.

Benefits

• BMO lists health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, and other potential rewards.

About BMO