Job Description

Background/IRC Summary

Any intelligent fool can make things bigger, more complex, and more violent. It takes a touch of genius – and a lot of courage – to move in the opposite direction." (Albert Einstein)

The International Rescue Committee responds to the world’s worst humanitarian crises and helps people to survive and rebuild their lives. Founded in 1933 at the request of Albert Einstein, the IRC offers lifesaving care and life-changing assistance to refugees forced to flee from war or disaster. At work today in over 40 countries and in 22 US cities, the IRC restores safety, dignity and hope to millions who are uprooted and struggling to endure. The IRC leads the way from harm to home.

The IT department supports the organization’s work by providing reliable and scalable applications and infrastructure for the IRC’s offices in the US and around the world, including many technologically challenging locations.

Job Overview/Summary:

The Business Systems Manager- Security an IRC leader accountable for managing and developing new and existing D365 security roles and application access policies and procedures. The Business Systems Manager (BSM)will lead the ongoing security audit process across multiple international implementation efforts utilizing both D365 security processes and the related Fastpath Assure audit software. The BSM must be business-driven and document processes, toolsets, and business requirements across enterprise systems and architecture. Best practices for implementing and maintaining D365 security must be documented and adhered to during a complex multi-national D365 for Finance and Supply Chain deployment. The ideal candidate is a leader and hands-on expert in multiple security project implementations. Critical thinking and team motivational skills are a must. The BSM will be supported by D365 technical and functional teams, leaders, and project managers.

Initial focus centers on security assessment, process documentation and best practice recommendations related to the existing 365 deployment in the US, Uganda and Sierra Leone, with ongoing support and process documentation for the future deployment to 40 countries by 2023. The BSM must ensure security management controls and transactions meet Sarbanes Oxley access requirements within the first year.

Major Responsibilities:

As the D365 security expert, this role is accountable for:

· Leading, improving, documenting, and managing security role modifications

· Assessing and implementing Segregation of Duty configuration based on IRC SOX requirements

· Monitoring D365 transaction and master data audit activities withing the Fastpath Assure application

· Providing quarterly D365 licensing analyses to Microsoft

· Providing key support and response to internal and external audit teams

· Leading a team of Analysts supporting key reporting efforts related to D365 and other integrated systems

Key Working Relationships:

Position Reports to: Deputy Director, ERP Systems

Position directly supervises: Business System Analysts

Other Internal and/or external contacts:

Internal:

- Project Business Owners, business project team members outside IT, and wider stakeholders

- Subject Matter Experts across other departments

- Software and Systems team members

- Project Managers and Project Coordinators in the Project Management team

External:

Vendors and implementation partners

Required Skills/Experience

- Bachelor’s degree or equivalent - 4+ years implementing and maintaining security for enterprise resource planning systems and functions, primarily Microsoft Dynamics 365 for Finance and Supply Chain or earlier versions - Experience with the support, analysis, documentation, administration, and security management for delivery of global ERP systems with substantial numbers of users across global time zones - 3+ years leading teams including performance reviews, goal setting and career development - Strong documentation and change management skills in a fast-paced environment - Ability to communicate effectively in both verbal (i.e. day-to-day discussions, team meetings, workshops) and written (requirements and design specifications) form, as well as an overall ability to be clear and concise in all communications - Good active listening skills and strong attention to detail - Proven ability to work both independently and in a dynamic, cross-functional team structure - Proven ability to establish and maintain working relationships across all departments and levels of the organization.

Preferred Skills

- MS in Information Technology - Experience with Fastpath Assure - Understanding of the Software Development Life Cycle (SDLC) - Experience with business and security compliance and auditing including SSAE16, ISO27001, and PCI - Experience in the NGO sector in the delivery of systems across varying IT infrastructure - Understanding of Microsoft Dev/Ops (task administration, execution)

Working Environment: Standard office work environment; work location may be another IRC office.

Travel****: Some international travel as needed.

The IRC and IRC workers must adhere to the values and principles outlined in IRC Way - Standards for Professional Conduct. These are Integrity, Service, and Accountability. In accordance with these values, the IRC operates and enforces policies on Beneficiary Protection from Exploitation and Abuse, Child Safeguarding, Anti Workplace Harassment, Fiscal Integrity, and Anti-Retaliation.

IRC et les employés de IRC doivent adhérer aux valeurs et principes contenus dans le IRC WAY (normes de conduite professionnelle). Ce sont l’Intégrité, le Service, et la Responsabilité. En conformité avec ces valeurs, IRC opère et fait respecter les politiques sur la protection des bénéficiaires contre l’exploitation et les abus, la protection de l’enfant, le harcèlement sur les lieux de travail, l’intégrité financière, et les représailles.

LI-GR1

Qualifications