Program Security Analyst

Requirements:

• More than three years of experience developing, documenting, and maintaining security policies, processes, procedures, and standards.
• Knowledge of network infrastructure, including routers, switches, firewalls, and related protocols and concepts.
• Demonstrated experience providing operational security support for a Software as a Service (SaaS) solution.
• Understanding of security requirements for Human Resource and Payroll systems.
• Experience with the Workday Human Resource and Payroll solution.
• Experience with Workday Prism data and reporting.
• Experience managing Workday user security as part of a business (non-IT) team.

Responsibilities:

• Support our Deputy Program Manager and Solution Technical Lead in adopting the future-state end-user security solution and protocols.
• Help deploy technical controls and establish processes and standards to maintain security configurations for the new Human Resource Management and Payroll solution.
• Develop and implement an information security program with the BEST Technical Implementation team and other program members.
• Implement security policies, processes, and standards for end-user roles, application data access, and user provisioning and de-provisioning.
• Provide operational support to our program team, product vendors, and Commonwealth users in line with agreed service-level requirements.
• Partner with the BEST team, system integrator, product vendors, CTR, and EOTSS to identify security requirements, including through risk and business impact assessments.
• Apply Commonwealth IT policies for user and data security, and work with the Commonwealth Risk Management Office on assessments and recommended controls.
• Collaborate with BEST information security leadership to develop strategies, procedures, and role recommendations that enforce security requirements and address risks associated with the new solution.
• Update configurations and perform security-related tasks during application development and implementation, ensuring controls are delivered as planned and access needs are addressed throughout the user lifecycle.
• Support the conversion of end users from the legacy system to the new system.
• Work with BEST, CTR, EOTSS, agency security and technology leaders, and the Commonwealth Risk Management Office to select and implement technical data security controls and maintain security processes centrally and within agencies where responsibilities are decentralized.
• Advise the BEST team, system integrator, and product vendors on end-user roles and groups, data access controls, and provisioning and de-provisioning protocols.
• Help the BEST team and Commonwealth agencies identify approved users and coordinate their provisioning for the new solutions Day One launch.
• Support the BEST Security Workstream in defining and implementing security needs.

Technologies:

• Support
• Network
• Security

More

We are hiring a Program Security Analyst for the BEST program in Boston, Massachusetts, at a posted wage range of $95–$100. The role is part of our BEST Technical Implementation team and supports the adoption of end-user security controls and protocols for a new Human Resource Management and Payroll solution. We offer medical, dental, and vision coverage; a dependent care flexible spending account; a 401(k) plan; optional life, disability, accident, and critical illness coverage; an employee assistance program; and sick leave in accordance with applicable regulations. Benefits are subject to eligibility, waiting periods, contributions, other applicable conditions, and change at our discretion. The eventual hourly rate is determined through a comprehensive salary analysis that may consider job-related skills and qualifications, education, experience, comparable roles, and market and business factors. We are an equal opportunity employer, including for protected veterans and individuals with disabilities.

last updated 43 week of 2026