Security IT Business Analyst

Apex Systems is a world class technology services business that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions.

Apex has an opportunity for a Security IT Business Analyst.

Position:
Security IT Business Analyst

Client:
Commonwealth of MA (EOHHS)

Location:

Quincy, MA (Hybrid)

Duration:
Thru 6/30/27 (with possibility of extension)

Pay rate: $76-$79/hour

The Executive Office of Health and Human Services is comprised of 11 agencies and the Mass Health program. EOHHS seeks to promote the health, resilience, and independence of the nearly one in three residents of the Commonwealth we serve. Our public health programs touch every community in the Commonwealth. To know more about EOHHS please visit https://(Use the "Apply for this Job" box below).-services

The EOHHS Chief Information Security Officer’s (CISO) Office is seeking to hire a highly motivated and detail-oriented Security IT Business Analyst to support the development, documentation, and improvement of security operational processes and governance activities. This role requires excellent writing and analytical skills, with a focus on documenting security policies, procedures, workflows, and processes. The successful candidate will work closely with members of the EOHHS CISO’s Office, IT teams, and agency stakeholders to analyze existing security practices, identify process gaps, and translate informal or undocumented procedures into clear, structured documentation.

Strong analytical, communication, and presentation skills are critical, as the role requires gathering information from technical subject matter experts and transforming it into documentation and artifacts that support operational consistency, audit readiness, and strategic decision-making.

The primary work location for this role will be at 100 Hancock Street, Quincy, Massachusetts 02171. The work schedule for this position is Monday thru Friday, 8:00AM to 4:00PM EST. This position would be expected to follow a hybrid model of reporting to work that combines in-office workdays and work from home days as needed. The Security IT Business Analyst is expected to occasionally travel to EOHHS agency area offices or group homes within the Commonwealth of Massachusetts as needed.

• policies, standards, procedures, standard operating procedures (SOPs), playbooks, runbooks, workflows, swim lane diagrams, and process guides.
• Analyze and document current-state security processes through interviews, observation, and analysis to identify gaps, inefficiencies, risks, and opportunities for improvement.
• Support security governance, compliance activities, and audit readiness by ensuring documentation is complete, accurate, and aligned with Commonwealth, federal, and industry security frameworks.
• Facilitate collaboration between the EOHHS CISO’s Office, IT teams, agency stakeholders, and external partners to ensure security processes are clearly defined, understood, and consistently implemented.
• Prepare reports, presentations, process documentation artifacts, and dashboards to track security initiatives and communicate progress to stakeholders and leadership.
• Assist in the development of security training, documentation, and communications that will promote adoption of security policies and best practices.
• Develop future-state process documentation and operational roadmaps that support improvements in security operations maturity and effectiveness.
• Contribute to the planning, tracking, and monitoring of security projects and initiatives to ensure timely delivery and alignment with security strategy and operational priorities.
• Manage and document risks, issues, and decisions related to security policies, operational processes, and improvement initiatives within the EOHHS CISO’s Office.
• Participate in security reviews and assessments and document findings, process gaps, and recommended remediation steps.
• Serve as a resource for gathering, analyzing, and documenting requirements for security initiatives, tools, operational processes, and documentation artifacts.
• Provide clear,…