Information Security Architect

OverviewPosition: Information Security Architect. Location: 1 Ashburton Place, Boston MA; Hybrid (4 days on-site a month). Duration: End Date 6/30/26 with possibility of extension. Rate: Negotiable Based on Experience.Program SummaryThe Commonwealth of Massachusetts is undertaking a multiyear initiative called the Business Enterprise Systems Transformation (BEST) Program to implement a comprehensive Enterprise Resource Planning (ERP) software solution. This solution will support a wide range of business functions across all state agencies. The initial phase aims to enhance financial management by replacing the current core financial and accounting system, MMARS. The ERP solution will also feature modules for Human Capital Management, Payroll, and other capabilities. The ERP may be delivered as a SaaS cloud-based system over time.Position SummaryThe BEST Program Solution Compliance Lead will provide leadership, facilitation, analysis, and design tasks to ensure that new business processes and software configuration support the Commonwealth’s fiscal laws, regulations, and policies. The Lead will advise teams on configuring software and workflows to support compliance with Commonwealth standards, and will coordinate with the Office of the Comptroller’s Statewide Risk Management Team to update training materials and internal control guidance.Specific DutiesDevelop requirements for risk compliance protocols and standards; end-user security protocols; configuration of audit and control features; training materials; and updates to Internal Control Questionnaires for Commonwealth agencies.Collaborate with the Statewide Risk Management Team on changes to the Internal Control Guide and materials.Plan and implement testing activities (e.g., UAT), develop test cases, review results, and recommend mitigations; participate in testing deliverables as needed.Identify and manage business process changes; support change management efforts with user groups and the Change Management Lead.Maintain awareness of existing and proposed state and federal legislation affecting audit, compliance, and IT standards; recommend necessary policy updates.Gather compliance information from agency users, review laws and policies, and advise on audit remediation options for use in audits.Required SkillsIn-depth experience with Commonwealth compliance statutes, regulations, policies, and the Comptroller Internal Control Guide per COSO ERM and Green Book.Experience in internal audit management including planning, testing, reporting, and evaluating controls.Excellent written and verbal communication and interpersonal skills.Experience developing training materials and delivering training on compliance risk identification and mitigation.Understanding of financial management policies across the enterprise, including Executive and non-Executive branches.Proven leadership and ability to work as an individual contributor or lead teams.Preferred QualificationsExperience in Business Process Analyses related to Commonwealth financial functions.Experience in business process re-design, organizational change, and user change management in large Commonwealth organizations.Experience with Artificial Intelligence tools in a regulated environment.Knowledge of current Commonwealth financial and HR applications and user actions within this system.Minimum Entrance RequirementsBachelor’s degree in organizational development and management, compliance and auditing, or related field.Knowledge of and experience within the Commonwealth’s state agency environment.EEOApex Systems is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, or other protected characteristics. We will consider qualified applicants with criminal histories in accordance with applicable law. If you require an accommodation in using our website for search or application, contact our Employee Services Department. #J-18808-Ljbffr

Created: 2025-09-17