Technical Security Analyst

Duration: 18 months contract
Hours per week: 37.5-40 hours per week
Location: Hybrid onsite one day per week in Downtown Boston, MA

Marchon's client is hiring a Technical Security Analyst to support the adoption of the future state end user security solution and protocols. The Technical Security Analyst will be a part of the Technical Implementation team and work closely with the other members of the team to develop and implement a comprehensive information security program. This includes:

• Implementing security policies, processes and standards related to end user roles, data access for application users and how users will be provisioned and de-provisioned.
• Providing operational support for the team, product vendors, and users.

Required Skills

• Bachelor's degree in computer science, system analysis or a related study, or equivalent experience in the field of audit compliance and security risk and compliance management.
• Minimum of five years of implementation and operational experience in IT, with a knowledge in the following technical disciplines: application development, audit compliance, database management, infrastructure and network design, security risk and compliance management, and cloud solutions.
• Extensive experience providing operational security support to end users
• Experience working with modern issue tracking systems (JIRA)
• Understanding of enterprise security best practices, including but not limited to IAM, RBAC, Network Security, SaaS, Cloud Security, Data Security, Encryption, and File transfer management.
• In depth exposure to defining and implementing end user security protocols in an enterprise environment.
• Exposure to technical configurations, technologies, and processing environments in one or more projects of similar size and complexity.
• Understanding of information risk concepts and principles as a means of relating business needs to security controls.
• Experience with common information security management frameworks, such as [International Organization for Standardization (ISO) 2700x and the ITIL, COBIT and National Institute of Standards and Technology (NIST)] frameworks.
• In-depth knowledge of risk assessment methods and technologies.
• Understanding of Human Resource and Payroll systems security requirements.
• Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity, and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools.
• More than 3 years of experience in developing, documenting, and maintaining security policies, processes, procedures, and standards.
• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Ability to interact with personnel at all levels and across all business units and organizations, and to comprehend business imperatives.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience with Software-as-a-Service cloud implementations particularly those in which legacy on premise applications have been migrated to cloud delivery options.
• Demonstrated operational security support experience in a Software as a Service (SaaS) solution.
• Experience with WorkDay Human Resource and Payroll solution.
• Experience with WorkDay Prism data and reporting solution.
• Experience with WorkDay user security management as a member of a business (non-IT) team.
• Experience in transitioning traditional IT security functions to business teams.
• Exposure to operating end user security protocols, policies, and other in a large public or private sector entity comparable in size to the Commonwealth.
• Audit, compliance, or governance experience is preferred.
• Experience with Audit, compliance, or governance actions.
• Experience with Microsoft security tools and functions
• Experience with Snowflake security functions