Business Analyst

This 6 month contract Business Analyst role is focused on two enterprise cybersecurity initiatives: API security assessment and secrets management in code. The role partners with application owners, developers, security teams, and executive leaders to investigate current-state risks, surface findings, and drive remediation through clear analysis and executive-ready reporting. The consultant will work across multiple enterprise platforms (e.g., Salesforce, SAP, Jira, Confluence, Slack) and multiple stakeholder groups. This role is ideally based in Calgary, AB, with an expectation of in-person engagement to build relationships, conduct interviews, and lead difficult but productive conversations. The Business Analyst acts as a trusted advisor, translating technical risk into business impact and accountability.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

• Strong experience as a Business Analyst or Risk Analyst in a medium-to-large enterprise environment
• Demonstrated experience working on cybersecurity, technology risk, or IT governance initiatives
• Ability to investigate and document API usage, integrations, and data flows across multiple applications and owners
• Experience identifying, documenting, and reporting risk findings in a clear, structured, and executive-friendly manner
• Proven ability to lead stakeholder interviews and workshops, including difficult conversations with application owners and leaders
• Strong understanding of risk management concepts and the ability to translate technical issues into business and operational impact
• Excellent written and verbal communication skills, with a focus on crisp, VP-level reporting
• Comfortable operating independently, pulling on investigative threads, and navigating ambiguity
• Familiarity with enterprise collaboration and tracking tools (e.g., Jira, Confluence, Slack)
Experience working within Canadian corporate culture, with strong business acumen and professionalism

• Prior experience working at Nutrien or strong familiarity with its enterprise application landscape
• Exposure to API security concepts and common enterprise systems such as Salesforce and SAP
• Experience supporting or partnering with internal audit, compliance, or security teams
• Background in secrets management, secure development practices, or SDLC risk assessments
• Experience preparing materials for executive leadership, VPs, or auditors
• Certifications or education related to risk management, cybersecurity, or business analysis (e.g., CBAP, CRISC, CISA)
Comfort working in a hybrid technical/non-technical environment without needing to be hands-on technical

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.