Business Analyst
Department: IT Security and Governance, Information Technology Operations and Security
Type: Full-Time - Permanent
Location: Toronto (Hybrid)
Posting Date: September 11, 2026
At OPTrust, paying pensions today, preserving pensions for tomorrow is our mission and business.
When you choose OPTrust, you join a team of smart, talented people who fuel our success and have a passion for pensions. Everyone at OPTrust – in Toronto, London and Sydney – makes a meaningful impact. Our culture is driven by team members with different backgrounds and perspectives creating an inclusive and fulfilling place to work for everyone. We work in a fast-paced environment, but we find time to have fun and give back to the community.
What OPTrust offers you
Unique culture rooted in our core values – collaboration and teamwork, integrity, respect, flexibility, excellence and continuous improvement.
A purpose-driven environment where we all work towards the common goal of paying pensions today and preserving pensions for tomorrow.
Comprehensive benefits focused on your health and wellness, including dental, vision and extended health benefits, as well as membership in our world-class defined benefit pension plan.
A flexible, hybrid work model.
A dedicated inclusion, diversity and equity strategy with meaningful opportunities to participate, including our employee-led resource groups.
Extensive professional development opportunities and learning initiatives including access to LinkedIn Learning, guest speakers, tuition reimbursement, professional association memberships, leadership development programs, a mentorship program, monthly professional development time and more.
A competitive vacation package with additional work-life balance day.
About the role
The successful candidate will be responsible for executing activities in ITOS division, specifically within IT Security and Governance team under Technology Risk and Control department. This will include business process re-engineering and gathering new business requirements, supporting IT audit, risk management, IT general controls, as well as executing user acceptance testing and training. The analyst will also provide project leadership for projects more routine in nature and provide business and technical application support.
What you’ll do
IT Audit and Compliance
Gathers evidence from IT operations and business units for both internal and external audits, documenting, analyzing, and performing audit tests to assess controls and compliance. Develops remediation action plans based on findings.
Implements, maintains, and communicates IT General Controls (ITGC) policies, procedures, and programs. Reviews and ensures alignment with actual practices, corporate objectives, and government standards.
Audit Planning & Reporting: Plans and conducts internal audits of IT systems, applications, and processes. Prepares working papers, audit reports, and recommendations to management, ensuring proper controls and accuracy of system-generated information.
Change Management, Access Management and IT General Controls
Independently manage the change management process, including organizing CAB meetings, reviewing RFCs, stakeholder engagement, and identifying risks. Develop contingency plans and ensure communication, business processes, and training are aligned with changes.
Conduct periodic reviews of user access rights to ensure compliance with the principle of least privilege. Implement and monitor IT General Controls (ITGC) to align with organizational objectives and regulatory requirements, providing recommendations for improvements based on audit findings and emerging risks.
Remediation, Process Enhancement, and Documentation
Effectively document/review and business requirement documents.
Perform data research and analysis.
Play a bridging role between business and technical teams.
Conduct research to determine best practices for work processes and make recommendations to the user group as to…