Associate Director, Enterprise Applications, User Access, Governance and Controls

Position Description

Reporting to the Senior Director of Administrative Systems in Harvard University Information Technology (HUIT) Administrative Technology Services (ATS), the Associate Director, Enterprise Applications (User Access, Governance and Controls) at Harvard will oversee operations tasks related to user security access, application maintenance, configuration, and audit and compliance for the University's suite of Enterprise Financial Systems, Human Resource Management Systems (HRMS), Research Administration and Compliance Systems, Enterprise Financial Reporting Applications, and Student Information System (SIS).

The Associate Director manages a team and liaises with ATS and HUIT teams in support of application security and configuration. They will also be responsible for operations and compliance with IT General Controls. The Associate Director is a people manager, performing all aspects of staff management, teaching and encouraging best practices, and mentoring staff.

The Associate Director is pivotal in guiding strategic direction in defining and leading the long-range strategic and technical direction for transforming administrative access controls and processes for the ATS portfolio.

The Associate Director will also provide a hands-on role with the direct oversight of a team of business analysts. They will also support institutional configuration, business processes, integrations, and customizations, including automating and streamlining operational work and business process reengineering as part of our application authentication initiative.

Principle Responsibilities:

• Accountable for the University-wide administrative and data access systems, services, and functions, including compliance.
• Define and lead the long-range strategic and technical direction for transforming administrative access controls.
• Manage;
  • Access to Programs and Data (APD), Change Controls (CC), and Computer Operations (CO) controls where EAPS is the ITGC control owner.
  • a team of Business Analysts responsible for application security and configuration, including daily operational work, releases, projects, and initiatives.
  • the resource allocation process, including skills and availability matrices, matching appropriate resources to requests, and communicating allocations to senior leadership, resource managers, and staff members.
• Participate in Information Security and Data Privacy (ISDP) initiatives (including self-assessment, etc.)
• Liaison with the Information Security and Data Privacy (ISDP) team as point ISO to ATS Administrative applications.
• Oversee, in a Leadership capacity, the annual PWC IT Audit for HUIT, which includes running point for all requests, meetings, and administration and working closely with HUIT Leadership, RMAS, and PWC. (also includes annual Management Representation Letter)
• Actively participate in projects across the applications we support, including presence on project Steering Committees and providing project resources as applicable. Support projects in defining access and security.
• Lead security-related system and process improvement initiatives across ATS, HUIT, and business stakeholders, as well as the ongoing governance for communities of practice, user groups, etc.
• Foster a culture of innovation, encouraging ownership from business analysts for product vision, authorization tools, and project delivery.
• Provide direction and advice regarding the ongoing support and enhancement of Application Security and Information Security.
• Partner with senior leadership to analyze existing processes and identify areas for applying additional/new tool/application functionality.
• And other duties as assigned.