Business / Data Analyst

Job Title

This position will join a project team, reporting to a Program Manager, to review all of the administrative groups that have access to manage the permissions of the folders and files on file shares globally. Further analysis will be required to determine if the appropriate administration groups are properly permissioned.

Primary Duties and Responsibilities

• Provide functional and technical knowledge and direction to standardize administration group permissions.
• Identify and inventory all servers and common file shares in scope.
• Review and analyze administration group permissions.
• Gather and define requirements by facilitating user meetings and interviewing users, as well as researching and resolving issues.
• Participate in business analysis project planning and management by documenting and maintaining execution plans, managing issue logs and preparing project documentation.
• Understand the project objectives by thoroughly comprehending the business, technology, security risks and goals.
• Conduct research on industry best practices and standards and other benchmarking data.
• Provide expertise for complex security related problem solving and risk mitigation.
• Engage appropriate stakeholders and incorporating feedback and requirements.
• Coordinate project communications, risks, and issues resolution.
• Identify obstacles and escalate issues through assigned project manager.
• Review and validate final administration group permissions.

Qualifications, Skills, and Experience:

• Bachelor’s degree or equivalent.
• At least 3 years of business analysis experience.
• At least 3 years of information security experience.
• A good understanding of Windows permissions in regards to file shares and Active Directory with groups and group membership.
• Extensive experience with Microsoft Office (Word, Excel, PowerPoint).
• Excellent organizational skills.
• Excellent attention to detail.
• Self-motivated and self-sufficient.
• Excellent communication and collaboration skills.
• Ability to collaborate and drive execution at all levels within a business area.
• Ability to communicate in written and verbal formats to various situations and audiences.
• Financial services experience is preferred.
• Prior experience with client is considered a plus.
• CISSP, CISM, CRISC, CISA, SSCP or similar certification is a plus.

3-5 “nice to have” attributes

• Past experience at client
• Be in commuting distance from Quincy and be willing to come into the office 2 – 3 times a week
• Financial industry experience

Top three must-haves

• Information Security/Risk Management experience
• Familiarity with folder permissions on file servers
• Excellent communication skills

Software skills is an absolute must have

• Advanced Excel (there are many reports that need to be generated)
• Windows (knowledge of folder permissions)
• General Microsoft Office

What business unit is this supporting?

• GTS/TPEO

Is it supporting a specific project or initiative? If so, which one and in what way?

• Common Share Remediation

Will this position be remote, hybrid, or 5 days onsite?

• Preferable Hybrid. I would prefer someone who can work in the office 2 – 3 times a week. I will consider Remote candidates if they are the best fit for the position.

If the position is fully remote, do you have a preference on where the contractor is located? (State/Time zone)?

• It would be preferable for any fully remote worker to be in the Eastern time zone.

What are the working hours? What timezone?

• Generally 8AM to 5PM EST, though some flexibility will be allowed.

Will this contractor need their own laptop or will client provide one for them?

• Contractor will need their own laptop

Will there be any training provided or would the need to jump right in first day?

• The person will shadow the current analyst, who is coming off the project on April 7, 2023. The current analyst will go over processes and procedures and also train on the tools that are used. Other project team members will also provide training. The person will be expected to be ready to work on their own at the beginning of April.

What type of background would you like this person to have?

• Good information security experience with a good understanding of folder permissions on file servers. Good interpersonal skills as they will need to work with people in IT and various business groups.

How many years experience?

• At least 3 years of information security experience.

What is the day to day of the person going to look like? Be specific.

• Review permissions reports for folders on shared network file servers.
• Identify inappropriate folder permissions.
• Put together plans with analysts to remediate inappropriate permissions.
• Confirm inappropriate permissions have been remediated.
• Generate reports as evidence to show that permissions have been remediated.

When will you be interviewing for this position? Please provide specific days/times if possible.