Business Analyst – Law 25 Project

Location

• Montreal

Date

• July 21, 2026

Type

• Contract

Industry

• Insurance

In the context of organizational compliance related to Law 25 – Modernization of legislative provisions in the field of protection of personal information, our client in the insurance and reinsurance sector is seeking to hire a business analyst specialized in compliance and data governance projects.

The mandate aims to support the analysis, documentation, coordination, and implementation of legal and operational requirements arising from Law 25, in collaboration with IT, information security, legal, compliance, and operations teams.

Responsibilities

• Analyze the requirements of Law 25 and translate legal obligations into functional, operational, and technological needs for the organization.
• Conduct impact analyses on business processes, systems, data flows, information management practices, and consent mechanisms.
• Document current processes (as-is) and define target processes (to-be) while considering requirements for confidentiality, data minimization, retention, destruction, and governance.
• Collaborate closely with security, legal, and compliance teams to ensure alignment of proposed solutions.
• Participate in the definition and implementation of data governance frameworks, including classification, processing registers, retention policies, and incident management mechanisms.
• Write functional specifications, user stories, acceptance criteria, and test scenarios related to required changes.
• Support IT teams in the implementation of technological solutions (consent management, anonymization, logging, data access, etc.).
• Accompany business teams during UAT, training, and deployment of new processes.
• Ensure rigorous tracking of deliverables, risks, dependencies, and project issues.
• Contribute to the preparation of internal communications and operational guides related to compliance.

Skills and Experience Required

• Demonstrated experience as a business analyst in compliance, data governance, or regulatory transformation projects.
• Deep understanding of Law 25, its operational and technological implications, and its impact on organizations.
• Experience participating in a Law 25 mandate within a company (ideally in the insurance, finance, reinsurance, or professional services sectors).
• Excellent ability to simplify complex legal requirements and translate them into concrete solutions.
• Strong experience in process documentation, writing functional specifications, and facilitating workshops.
• Knowledge of information security practices, identity management, consent management, data classification, and risk management.
• Ability to work in multi-team environments and manage multiple stakeholders.

Assets

• Experience in the insurance or reinsurance industry.
• Knowledge of related compliance frameworks (LPRPDE, GDPR, ISO 27001 standards, data governance practices).
• Familiarity with data management systems, insurance platforms, document management tools, or confidentiality solutions.
• Certification in business analysis (CBAP, PMI-PBA) or data governance.
• Language:
• Bilingual (French and English)
• Contact:
• Submission of your CV:
• cv@cofina.ca
• Submission of your references:
• reference@cofina.ca