End-User Security Analyst — HR SaaS/Workday Focus

Lancesoft; Boston (MA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

CTR in Boston seeks a BEST Technical Security Analyst to support end-user security for the new HR/payroll solution, coordinating with the BEST Deputy PM and EOTSS to deploy controls and standards. You will help define roles, access provisioning, and risk-based security configurations across agencies.

This hybrid, on-site role at CTR’s Boston office requires 37.5–40 hours per week and an 18–24 month duration, with collaboration across multiple teams to ensure secure Day One go-live.

Qualifications

• Extensive experience providing operational security support to end users.
• Experience with modern issue tracking systems (JIRA).
• Understanding of IAM, RBAC, Network Security, SaaS, Cloud Security, Data Security, Encryption, and File transfer management.
• Experience defining and implementing end user security protocols in large public/private entities.
• Exposure to security configurations in large projects of similar size.
• Knowledge of risk assessment methods and security frameworks (ISO, NIST, COBIT).
• Familiarity with WorkDay HR/payroll security requirements.
• Strong analytical and communication skills.

Responsibilities

• Identify security requirements with BEST Team, SI, and vendors; provide operational support per SLA.
• Implement Commonwealth IT policies on user and data security.
• Collaborate with Risk Management Office on assessments and controls.
• Develop security playbooks for day-2 operations and documentation.
• Advise on end-user security roles and provisioning workflows.

Skills

Operational security

JIRA

IAM RBAC

Workday security

Security policies

NIST ISO

SaaS security

Public sector

Cloud security

Incident response

Job description

CTR in Boston seeks a BEST Technical Security Analyst to support end-user security for the new HR/payroll solution, coordinating with the BEST Deputy PM and EOTSS to deploy controls and standards. You will help define roles, access provisioning, and risk-based security configurations across agencies.

This hybrid, on-site role at CTR’s Boston office requires 37.5–40 hours per week and an 18–24 month duration, with collaboration across multiple teams to ensure secure Day One go-live.