Business Analyst - Level 3

This is a remote position.

Project Description:

The client requires a Senior Business Analyst to work with Technology Services Risk Management Program Committee and other stakeholders to review and enhance the organization’s exiting Risk Management Program.

Deliverables:

·       Engage with key stakeholders to identify objectives and goals of the IT Risk Management Program.

·       Gather and document business requirements of the IT Risk Management Program by performing elicitation and coordination tasks with stakeholders.

·       Review existing IT Risk governance and program documentation, and capture undocumented processes, developing a picture of current state, including maturity levels across various business capabilities.

·       Help to establish a IT Risk governance framework which will ensure ongoing oversight and management of the IT Risk Management Program;

·       Review IT Risk policies, standards and procedures, evaluating in accordance with industry best practices and regulatory requirements.

·       Complete assessment of current state Risk Management practices across the organization.

·       Identify and implement any short-term opportunities to improve current Risk Management processes.

Requirements

Mandatory Requirements:

·       A University degree in Computer Science, Business Administration, a related discipline, or certification in Information Technology from a recognized community college.  An equivalent combination of education and experience may be considered.

·       5 years experience as a senior business analyst working in Information Technology with a focus on IT Risk Management Programs.

·       Excellent communication skills (written and oral) in English.

Scored Requirements:

·       Experience with defining and implementing an IT Risk Management Program. Response should reference a project(s) in your resume and touch on your experience with the key components to effectively identify, assess, manage, and monitor risks.  

·       Experience in creating and enforcing IT governance policies and procedures, and ensuring that they align with organizational goals and risk tolerance.

·       Experience in developing communication strategies to educate staff about IT risks and best practices, and to communicate risk management strategies to stakeholders.

·       Experience with ongoing monitoring, auditing, and reviewing of IT risk management practices to ensure they remain effective and relevant.

·       Experience with risk assessment methodologies and frameworks such as ISO 27001, FAIR (Factor Analysis of Information Risk), NIST, or COBIT.

·       Current certification from a recognized professional business analysis association, such as PMI-PBA, IIBA-CBAP.

·       Experience working in or for the public sector in Canada.