- Company Name
- Ontario Teachers' Pension Plan
- Job Title
- Senior Business Analyst (Enterprise Security)
- Job Description
-
**Job Title**: Senior Business Analyst (Enterprise Security)
**Role Summary**
Lead the translation of enterprise security business needs into secure, technical solutions. Own requirements elicitation, documentation, and validation against cyber‑security best practices while collaborating with development, testing, operations, and external vendors to deliver high‑quality, secure solutions.
**Expectations**
- Deliver precise, traceable requirements and functional specifications that embed security controls.
- Collaborate closely with cross‑functional stakeholders to align project scope, timelines, and risk mitigation.
- Champion security considerations throughout design, development, testing, and deployment.
- Provide actionable insights on cyber‑security trends, threats, and emerging technologies.
**Key Responsibilities**
- Facilitate workshops and sessions to gather, validate, and prioritize business requirements.
- Translate business needs into detailed technical specifications, configuration needs, and functional designs.
- Produce high‑quality deliverables: requirements documents, workflows, current/future‑state process maps, data mapping specifications, and solution specs.
- Manage requirements traceability, user story prioritization, and acceptance criteria.
- Coordinate testing activities, defect management, and mitigation strategies to ensure solution quality.
- Advise on security requirements, best practices, and compliance throughout the solution lifecycle.
- Partner with vendors and internal teams to ensure solutions meet security and quality standards.
- Recommend and implement process, tool, and practice enhancements to improve delivery efficiency.
- Lead user acceptance testing, facilitate defect resolution, and transition solutions to production.
**Required Skills**
- Strong business analysis and requirements engineering.
- Deep understanding of cyber‑security concepts, controls, and regulatory frameworks.
- Experience with Agile/Scrum methodologies, backlog grooming, and story mapping.
- Proficiency in creating functional specifications, data models, and workflow diagrams.
- Excellent stakeholder engagement, facilitation, and communication skills.
- Ability to manage risk, issue resolution, and defect tracking.
- Knowledge of data warehousing, relational and dimensional modeling.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Systems, Business Analytics, or related field.
- 5+ years of business analysis in cyber‑security or enterprise security environments.
- Certifications: CBAP / PMI‑PBA and at least one security credential (e.g., CISSP, CISM, or equivalent).