We are seeking a Security Analyst to support a large-scale enterprise systems transformation involving the implementation of a SaaS-based Human Resources and Payroll solution. The role will focus on end-user security, access management, data security, security controls, operational support, and the implementation of security policies and procedures.
The ideal candidate will have strong experience with IAM, RBAC, SaaS security, application/data security, user provisioning and de-provisioning, and enterprise security implementations.
Key Responsibilities
- Implement security policies, processes, standards, and controls related to end-user roles, application access, and data security.
- Define and implement user roles, permissions, security groups, provisioning, and de-provisioning procedures.
- Support security requirements for data conversion, data access, integrations, and application implementation.
- Provide operational security support and assist with security issues, incidents, and authorization requests.
- Monitor security logs and reports for unusual activity and support investigation and remediation activities.
- Work with technical teams, vendors, system integrators, and business stakeholders to implement security requirements.
- Support the development of operational procedures and security documentation.
- Assist with security risk assessments, business impact assessments, and implementation of appropriate security controls.
- Support end-user security activities throughout the user lifecycle, including access provisioning and authorization.
- Assist with the implementation and maintenance of security configurations and controls.
- Support security administrators in resolving security incidents and act as a liaison with incident response teams.
- Maintain awareness of applicable security standards, regulations, threats, and security best practices.
Required Skills
- 5+ years of IT implementation and operational experience with security, cloud, application, infrastructure, database, or compliance-related technologies.
- Strong experience providing operational security support to enterprise users.
- Experience with IAM, RBAC, application security, data security, SaaS, cloud security, encryption, and access management.
- Experience implementing end-user security protocols in large, complex organizations.
- Experience with user provisioning, de-provisioning, roles, permissions, and access controls.
- Experience with modern issue tracking systems such as JIRA.
- Strong understanding of security risk assessment and security controls.
- Experience with security frameworks such as NIST, ISO 2700x, ITIL, or COBIT.
- More than 3 years of experience developing, documenting, and maintaining security policies, processes, procedures, and standards.
- Knowledge of network infrastructure, firewalls, routers, switches, and network protocols.
- Strong analytical, communication, documentation, and stakeholder management skills.
Preferred Skills
- Experience with SaaS cloud implementations, particularly migration from on-premises to cloud-based solutions.
- Experience providing operational security support within a SaaS environment.
- Experience with Workday HR/Payroll and Workday security management.
- Experience with Workday Prism data and reporting.
- Experience with Microsoft security tools and functions.
- Experience with Azure Active Directory / Microsoft Entra ID and SSO.
- Experience with Snowflake security.
- Experience in audit, compliance, governance, or security risk management.
- Experience transitioning traditional IT security functions to business teams.
Education
Bachelor's degree in Computer Science, Systems Analysis, or a related field, or equivalent experience in audit, compliance, security risk, and compliance management.
Work Arrangement
This is a hybrid position in Boston, MA. The role requires a minimum of four business days per month onsite, with two designated onsite days and two additional days determined by the employee and manager. Candidates must be able to report onsite with little or no notice when required.