Business Analyst

About the role

Structured engagement sessions with lab scientists, instrument operators, and Business System Owners across Boston, San Diego, Oxford/UK, and other sites to understand how Non-Attributable Accounts (NAAs) are used in day-to-day operations.

Responsibilities

• Document current-state workflows, instrument dependencies, and access patterns for each active NAA, focusing on the top NAA-host pairs driving most activity.
• Identify and capture edge cases, exceptions, and operational constraints affecting remediation activities.
• Build and maintain a comprehensive registry of system owners and end users associated with active NAA-dependent host names across the Lab OU.
• Interpret NAA login activity data, translating technical findings into plain-language summaries for business stakeholders.
• Document the specific purpose, frequency, and operational context of NAA use for each account-host pair under review.
• Maintain accurate, up-to-date documentation of remediation decisions, stakeholder approvals, and outstanding items throughout the program lifecycle.
• Provide clear, practical guidance to system owners on transitioning from NAAs to attributable accounts and managing new access request workflows.
• Create end-user-facing content for the Lab & OT Security Confluence page, including plain-language workstream summaries, FAQs, and what this means for you guidance.
• Develop and maintain training materials, quick reference guides, and process documentation to support the transition to attributable accounts and new access request workflows.
• Draft targeted communications to lab heads, site heads, and Business System Owners as the program progresses.
• Support business analysis activities across all four active security workstreams: NAA remediation, software download restrictions, vulnerability remediation, and USB data transfer restrictions.
• Contribute to the demand intake process by helping end users and vendors navigate the ServiceNow-based service account request workflow once activated.
• Participate in program status meetings, providing updates on stakeholder engagement progress, open items, and risks to timeline.

Qualifications

• Bachelor's degree required (B.S. in Business, Information Systems, Life Sciences, or a related field, or equivalent practical experience).
• 3-6 years of relevant experience in business analysis, stakeholder engagement, or a related function within a technology, life sciences, or regulated environment.
• Demonstrated experience conducting structured discovery and requirements-gathering sessions with non-technical end users.
• Experience producing clear, professional documentation including process maps, workflow descriptions, stakeholder registers, and training materials.
• Prior experience working in or alongside laboratory, pharmaceutical, or biotech environments is strongly preferred.
• Experience supporting technology change programs or system migrations, particularly those requiring significant end-user engagement, is highly desirable.