End-User Engagement & Discovery
Lead structured engagement sessions with lab scientists, instrument operators, and Business System Owners across all sites Boston, SanDiego, Oxford/UK, and others) to understand how Non-Attributable Accounts (NAAs) are currently used in day-to-day operations.
Document current-state workflows, instrument dependencies, and access patterns for each active NAA, with particular focus on the top NAA-host pairs driving the majority of activity.
Identify and capture edge cases, exceptions, and operational constraints that could affect the feasibility or timing of remediation activities.
Build and maintain a comprehensive registry of system owners and end users associated with active NAA-dependent host names across the Lab OU.
NAA Usage Documentation & Analysis
Work with the engineering team to interpret NAA login activity data, translating technical findings (allow/deny lists, host activity logs, delta analyses) into plain-language summaries for business stakeholders.
Document the specific purpose, frequency, and operational context of NAA use for each account-host pair under review, creating a living record that informs both remediation decisions and future audit requirements.
Support the identification of which NAA-dependent workflows can be remediated through password resets, which require Transparent Screen Lock, and which require BeyondTrust-managed service accounts.
Maintain accurate, up-to-date documentation of remediation decisions, stakeholder approvals, and outstanding items throughout the program lifecycle.
Guidance & Change Support for System Owners
Serve as the primary point of contact for Business System Owners navigating the transition from NAAs to attributable accounts and properly managed service accounts.
Provide clear, practical guidance to system owners on what is changing, why it is changing, what they need to do, and when in language appropriate for a non-technical audience.
Support system owners in completing required actions (engagement confirmations, vendor access approvals, ServiceNow requests) within program timelines.
Identify and escalate cases where system owners are unresponsive, blocked, or require additional technical support to proceed.
Content Development & Communications
Develop and maintain end-user-facing content for the Lab & OT Security Confluence page, including plain-language workstream summaries, FAQs, and what this means for you guidance.
Create training materials, quick reference guides, and process documentation to support the transition to attributable accounts and new access request workflows.
Draft targeted communications to lab heads, site heads, and Business System Owners as the program progresses, in coordination with the Lab Solutions leadership team.
Build review-ready content packages for leadership updates, including workstream status summaries, stakeholder engagement progress, and outstanding risk items.
Cross-Workstream Support
Support business analysis activities across all four active security workstreams: NAA remediation, software download restrictions, vulnerability remediation, and USB data transfer restrictions.
Contribute to the demand intake process by helping end users and vendors navigate the ServiceNow-based service account request workflow once activated.
Participate in program status meetings, providing updates on stakeholder engagement progress, open items, and risks to timeline.
Required Education Level
Bachelor s degree required (B.S. in Business, Information Systems, Life Sciences, or a related field, or equivalent practical experience).
Required Experience
3 6 years of relevant experience in business analysis, stakeholder engagement, or a related function within a technology, life sciences, or regulated environment.
Demonstrated experience conducting structured discovery and requirements-gathering sessions with non-technical end users.
Experience producing clear, professional documentation including process maps, workflow descriptions, stakeholder registers, and training materials.
Prior experience working in or alongside laboratory, pharmaceutical, or biotech environments is strongly preferred.
Experience supporting technology change programs or system migrations, particularly those requiring significant end-user engagement, is highly desirable.
Required Knowledge / Skills
Stakeholder Engagement & Communication
Exceptional interpersonal and communication skills able to build trust quickly with scientists, lab operators, and senior Business System Owners across multiple sites and cultures.
Ability to translate complex technical concepts (Active Directory, service accounts, NAAs, endpoint security) into plain language that non-technical audiences can act on.
Comfortable facilitating structured discovery workshops, one-on-one interviews, and group review sessions both in-person and virtually across global sites.
Documentation & Analysis
Strong documentation skills with a high standard for accuracy, clarity, and completeness.
Ability to work with data outputs (login logs, host lists, activity summaries) to identify patterns and translate findings into business-relevant insights without requiring deep technical expertise.
Proficiency in Microsoft Office (Word, Excel, PowerPoint) and collaboration tools (Confluence, SharePoint, or equivalent).
Content & Training Development
Experience developing end-user-facing content including FAQs, process guides, training decks, and communications that are clear, concise, and audience-appropriate.
Familiarity with Confluence or similar wiki-based platforms for publishing and maintaining living program documentation.
Working Style
Highly organized and self-directed able to manage multiple stakeholder engagement tracks simultaneously across different sites and workstreams.
Detail-oriented with strong follow-through ownership of open items through to resolution is essential in this role.
Collaborative and culturally aware this role engages stakeholders across US East Coast, US West Coast, and UK sites with different working norms and constraints.
Resilient and adaptable comfortable operating in a program where scope, priorities, and stakeholder
