Applications Security Analyst

PURPOSE:

Information Technology Services (ITS) goal is to support Jewish Board's programs and services through timely response and provision of technologies, applications, and customer-facing support in order for the agency to meet its operational and strategic objectives. As a support services division, ITS strives to be responsive to each user's needs and work to resolve issues in a timely manner.

POSITION OVERVIEW:

The Applications Security Analyst is responsible for ensuring the confidentiality, integrity, and availability of HR and Finance systems and data. This role bridges the gap between HR and Finance operations, and ITS security, focusing on safeguarding sensitive employee and finance information, managing access controls, and ensuring compliance with data protection regulations.

KEY ESSENTIAL FUNCTIONS (List the functions that are essential to achieve the goals):

• Monitor and assess security risks related to HR and Finance applications (e.g., Dayforce, CultureAmp, Andros, Tableau HR, Sage Intaact, SAP Concur).
• Conduct regular audits of user access, permissions, and data flows.
• Collaborate with ITS Security to implement and maintain security controls.
• Manage role-based access controls (RBAC) and user provisioning/deprovisioning.
• Ensure segregation of duties and enforce least privilege principles.
• Evaluate new product releases, communicate with the HR/Finance teams and assign permissions.
• Ensure HR and Finance systems comply with internal policies and external regulations (e.g., GDPR, HIPAA, SOC 2).
• Assist in preparing for audits and responding to audit findings.
• Maintain documentation of security procedures and controls.
• Investigate and respond to security incidents involving HR and Finance data.
• Coordinate with cybersecurity teams on threat detection and mitigation.
• Work closely with HR, Finance, IT, and Legal teams to align security practices.

• Provide training and guidance to HR, Finance and other stakeholder staff on data security best practices.

• ADDITIONAL FUNCTIONS MAY INCLUDE (List additional functions needed to reach goals):

• Participate in other HRIS/Finance projects as assigned.

EDUCATION / TRAINING REQUIRED (List all that is required to achieve this position):

• Bachelor's degree in Business Administration, Computer Science/IT or related field or equivalent experience in related field

EXPERIENCE REQUIRED / LANGUAGE PREFERENCE (List what the desire to reach goals):

• 3+ years experience in HR or Finance systems
• Knowledge of data privacy regulations and compliance frameworks
• Experience with audit processes and documentation
• Strong interpersonal and verbal communication skills, with ability to engage staff collaboratively required
• Strong organization skills with an ability to work independently to complete projects required
• Excellent writing and presentation skills; listening, analytical and problem solving skills required
• Skill in project management and business process redesign required

COMPUTER SKILLS REQUIRED (List the computer skills needed):

• Excellent quantitative data analysis and presentation skills and proficiency with relevant software (Excel, PowerPoint, Word, Access)
• Ability to quickly adapt to Agency HR and Finance computer applications.

VISUAL AND MANUAL DEXTERITY:

• Sustain the manual dexterity required to operate standard office equipment

WORK ENVIRONMENT / PHYSICAL EFFORT:

• Noise level and hazards present are consistent with levels usually present in an office, education, rehabilitation, industrial, workshop or health related environment.