Security Analyst

<p>We are seeking a <b>Security Analyst</b> to support a large-scale enterprise systems transformation involving the implementation of a SaaS-based Human Resources and Payroll solution. The role will focus on end-user security, access management, data security, security controls, operational support, and the implementation of security policies and procedures.</p><br /><p>The ideal candidate will have strong experience with <b>IAM, RBAC, SaaS security, application/data security, user provisioning and de-provisioning, and enterprise security implementations</b>.</p><br /><h3>Key Responsibilities</h3><br /><ul><br /><li>Implement security policies, processes, standards, and controls related to end-user roles, application access, and data security.</li><br /><li>Define and implement user roles, permissions, security groups, provisioning, and de-provisioning procedures.</li><br /><li>Support security requirements for data conversion, data access, integrations, and application implementation.</li><br /><li>Provide operational security support and assist with security issues, incidents, and authorization requests.</li><br /><li>Monitor security logs and reports for unusual activity and support investigation and remediation activities.</li><br /><li>Work with technical teams, vendors, system integrators, and business stakeholders to implement security requirements.</li><br /><li>Support the development of operational procedures and security documentation.</li><br /><li>Assist with security risk assessments, business impact assessments, and implementation of appropriate security controls.</li><br /><li>Support end-user security activities throughout the user lifecycle, including access provisioning and authorization.</li><br /><li>Assist with the implementation and maintenance of security configurations and controls.</li><br /><li>Support security administrators in resolving security incidents and act as a liaison with incident response teams.</li><br /><li>Maintain awareness of applicable security standards, regulations, threats, and security best practices.</li><br /></ul><br /><h3>Required Skills</h3><br /><ul><br /><li>5+ years of IT implementation and operational experience with security, cloud, application, infrastructure, database, or compliance-related technologies.</li><br /><li>Strong experience providing operational security support to enterprise users.</li><br /><li>Experience with <b>IAM, RBAC, application security, data security, SaaS, cloud security, encryption, and access management</b>.</li><br /><li>Experience implementing end-user security protocols in large, complex organizations.</li><br /><li>Experience with user provisioning, de-provisioning, roles, permissions, and access controls.</li><br /><li>Experience with modern issue tracking systems such as <b>JIRA</b>.</li><br /><li>Strong understanding of security risk assessment and security controls.</li><br /><li>Experience with security frameworks such as <b>NIST, ISO 2700x, ITIL, or COBIT</b>.</li><br /><li>More than 3 years of experience developing, documenting, and maintaining security policies, processes, procedures, and standards.</li><br /><li>Knowledge of network infrastructure, firewalls, routers, switches, and network protocols.</li><br /><li>Strong analytical, communication, documentation, and stakeholder management skills.</li><br /></ul><br /><h3>Preferred Skills</h3><br /><ul><br /><li>Experience with <b>SaaS cloud implementations</b>, particularly migration from on-premises to cloud-based solutions.</li><br /><li>Experience providing operational security support within a SaaS environment.</li><br /><li>Experience with <b>Workday HR/Payroll</b> and Workday security management.</li><br /><li>Experience with <b>Workday Prism</b> data and reporting.</li><br /><li>Experience with Microsoft security tools and functions.</li><br /><li>Experience with <b>Azure Active Directory / Microsoft Entra ID</b> and SSO.</li><br /><li>Experience with <b>Snowflake security</b>.</li><br /><li>Experience in audit, compliance, governance, or security risk management.<br /></li><li>Experience transitioning traditional IT security functions to business teams.</li><br /></ul><br /><h3>Education</h3><br /><p>Bachelor's degree in Computer Science, Systems Analysis, or a related field, or equivalent experience in audit, compliance, security risk, and compliance management.</p><br /><h3>Work Arrangement</h3><br /><p>This is a <b>hybrid position in Boston, MA</b>. The role requires a minimum of <b>four business days per month onsite</b>, with two designated onsite days and two additional days determined by the employee and manager. Candidates must be able to report onsite with little or no notice when required.</p><br />#J-18808-Ljbffr