Risk and Compliance Lead
W2 Contract
Hybrid to Boston, MA
Pay Rate – $100/HR
37.5 Hours Per Week
Overview
Lead the security, risk, and compliance workstream for a large Workday implementation. This role is responsible for ensuring the Workday environment is secure, compliant, and aligned with organizational security standards, while coordinating with technical teams, vendors, and stakeholders throughout the project.
Key Responsibilities
- Lead security activities across:
- Infrastructure/hosting security
- Application security
- Identity and access management (SSO, IAM)
- Support the integration of Workday and Workday Prism with Single Sign-On (SSO) solutions.
- Evaluate and recommend secure access solutions for users who cannot use standard authentication methods.
- Oversee user access controls, security roles, onboarding, and offboarding processes.
- Manage vendor security requirements, service level agreements (SLAs), and security reporting.
- Coordinate security testing, compliance reviews, and remediation of identified issues.
- Perform risk assessments and recommend controls to address security risks.
- Develop security procedures, governance processes, and role responsibilities.
- Support disaster recovery, business continuity planning, testing, and documentation.
- Partner with project teams, vendors, and security stakeholders to ensure compliance throughout the implementation.
Required Skills
- Experience leading security and compliance efforts for large enterprise technology implementations.
- Strong knowledge of information security, risk management, and security governance.
- Experience with cloud security, identity management, and Single Sign-On (SSO).
- Knowledge of security frameworks such as NIST, ISO 27001, COBIT, ITIL, and SOX.
- Experience with risk, vulnerability, control, and business impact assessments.
- Understanding of IAM, MFA, PAM, DLP, encryption, endpoint security, and vulnerability management.
- Experience integrating security tools and third-party vendor solutions.
- Strong business analysis, planning, organizational, and communication skills.
- Experience developing security policies, procedures, and standards.
- Familiarity with Jira and enterprise project environments.
Preferred Qualifications
- Experience securing HR and Payroll systems.
- Workday security and Workday implementation experience.
- Experience defining user security roles and access controls in large organizations.
- Experience with AI security and governance.
- Experience supporting technology implementations within government or highly regulated environments.
#LI-EH2
#INDPRO