research associate

senior data engineer

senior graphic designer

administrative assistant ii, healthcare associates Jobs in Boston

advanced associate, sales excellence administrator Jobs in Boston

senior associate tech assurance sap security controls

KPMG

<div><p>Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Working Mother Magazine, Diversity Inc. and others. If you're as passionate about your future as we are, join our team.</p>
<p>KPMG is currently seeking a Senior Associate to join Technology Assurance - SAP Security &amp; Control in our Audit practice.</p><h3 class="jobSectionHeader"><b>
Responsibilities:</b></h3><ul><li>
Lead or support IT Audit engagements focused on modern ERP systems, with an emphasis on SAP ERP platforms</li><li>
Assess ERP implementation risks in real time to identify security, risk and control considerations</li><li>
Evaluate the design and operating effectiveness of application and general IT controls across key business processes</li><li>
Apply automation and data analytics tools to enhance audit procedures and deliver actionable insights</li><li>
Collaborate with clients to identify opportunities for improving security and control frameworks</li><li>
Coach and mentor team members to build ERP and SAP knowledge within the group</li><li>
Supervise Associates and Interns during engagements</li></ul><h3 class="jobSectionHeader"><b>
Qualifications:</b></h3><ul><li>
Minimum three years of experience in any of the following areas: internal or external IT audit, Modern ERP packages internal control experience (SAP preferred) or risk assessments with business process experience</li><li>
Bachelors degree in an appropriate field from an accredited college/university. CPA or CISA required for Managers</li><li>
Excellent written and verbal communication, facilitation and presentation skills with the ability to gain the confidence and respect of senior level executives</li><li>
Ability to travel as necessary</li></ul>
<div><div>KPMG LLP and its affiliates and subsidiaries (&ldquo;KPMG&rdquo;) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits &amp; How We Work.</div><div></div><div><br>
Follow this link to obtain salary ranges by city outside of CA:</div></div>
https://kpmg.com/us/en/how-we-work/pay-transparency.html/?id=M132TA_4_25
<p>KPMG offers a comprehensive compensation and benefits package. KPMG is an equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state, or local laws. The attached link contains further information regarding KPMG's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.</p><p>
KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them.</p><p>
Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.</p></div>

Senior Associate, Tech Assurance - SAP Security & Controls

The Planet Group

<div>
 <p>
  <strong>
   Sr Accounts Payable Associate
  </strong>
 </p>
 <p>
  Direct Hire
 </p>
 <p>
  Hybrid 3 days in office - Boston MA 02210
 </p>
 <p>
  Salary: $70,000-82,000
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Must have:
  </strong>
 </p>
 <p>
  5+ years AP
 </p>
 <p>
  1+ years AP within a law firm
 </p>
 <p>
  experience with Travel and Expenses
 </p>
 <p>
  Excel
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Nice to have:
  </strong>
 </p>
 <p>
  Elite or Aderant software
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job Description:
  </strong>
 </p>
 <p>
  The Senior Accounts Payable Associate manages the full-cycle accounts payable function, ensuring accurate, timely, and compliant processing of invoices, employee expenses, and payments. This role oversees daily AP operations, supports internal controls, and partners cross-functionally to resolve issues, improve processes, and maintain financial integrity.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities:
  </strong>
 </p>
 <p>
  Review, validate, and process vendor invoices and employee expense reports, ensuring proper coding, approvals, policy compliance, and supporting documentation.
 </p>
 <p>
  Generate vouchers and execute domestic and international payments (ACH, wires, foreign drafts, and electronic payments) through accounting and banking platforms.
 </p>
 <p>
  Monitor aging, exceptions, and workflow bottlenecks; proactively resolve discrepancies and escalate issues to maintain service levels.
 </p>
 <p>
  Perform month-end and year-end close activities, including reconciliations, audit support, and preparation of schedules and documentation.
 </p>
 <p>
  Post recurring electronic files and other charges to the general ledger; reconcile entries and remediate discrepancies.
 </p>
 <p>
  Maintain accurate vendor records, including tax documentation and banking information; ensure proper authorization of changes.
 </p>
 <p>
  Record, reconcile, and file multi-state sales and use tax; support annual 1099 reporting and unclaimed property processes.
 </p>
 <p>
  Research and resolve invoice discrepancies, credits, and statement variances in collaboration with vendors and internal stakeholders.
 </p>
 <p>
  Support and strengthen internal controls over disbursements, including approval workflows and segregation of duties.
 </p>
 <p>
  Provide cross-training and mentorship to ensure coverage across AP functions.
 </p>
 <p>
  Identify and implement process improvements to enhance efficiency, compliance, and operational effectiveness.
 </p>
</div>


Sr AP Administrator

ServiceNow

<div><b>Company Description</b><p><br>
It all started in sunny San Diego, California in 2004 when a visionary engineer, Fred Luddy, saw the potential to transform how we work. Fast forward to today &mdash; ServiceNow stands as a global market leader, bringing innovative AI-enhanced technology to over 8,100 customers, including 85% of the Fortune 500&reg;. Our intelligent cloud-based platform seamlessly connects people, systems, and processes to empower organizations to find smarter, faster, and better ways to work. But this is just the beginning of our journey. Join us as we pursue our purpose to make the world work better for everyone.</p><b><br>
Job Description</b><p><b><br>
About the team:</b></p><p><br>
We are the backbone of Microsoft-powered collaboration at ServiceNow. Our team owns and manages the organization's Microsoft infrastructure &mdash; spanning Outlook, SharePoint, OneDrive, Microsoft Teams, and the broader collaboration ecosystem &mdash; ensuring employees have the tools, access, and experience they need to work seamlessly.</p><p>
Beyond keeping the lights on, we take a strong stance on security and governance within the Microsoft environment. From access controls and data policies to compliance frameworks, we ensure our collaboration platforms are not just productive &mdash; but safe, compliant, and built to scale.</p><p>
Whether it's enabling the workforce through modern collaboration tools or safeguarding the integrity of our Microsoft ecosystem, the DT Collaboration team sits at the intersection of productivity and trust.</p><p><b>
About the role:</b></p><p><br>
We are seeking a senior individual contributor to lead the technical design, implementation, and ongoing security operations of a Microsoft 365 GCC High environment supporting Controlled Unclassified Information (CUI). This role is accountable for implementing and evidencing compliance with CMMC Level 2, DFARS 7012, and NIST 800-171 controls.</p><p>
The engineer will act as the technical owner of the GCC High enclave, partnering with Security, Legal, and IT to ensure audit readiness and successful certification by May 2026.</p><p>
This role requires independent execution, deep security expertise, and the ability to translate regulatory requirements into enforceable technical controls.</p><p><b>
The impact you'll make:</b></p><p><b>
Architecture &amp; Tenant Build</b></p><ul><li>
Lead GCC High tenant design and deployment</li><li>
Define secure architecture for:</li><li>
Entra ID (Azure AD)</li><li>
Exchange Online</li><li>
SharePoint/OneDrive</li><li>
Teams</li><li>
Intune</li><li>
Defender Suite</li><li>
Purview Compliance</li><li>
Establish Zero Trust and least-privilege administrative model</li><li>
Design CUI boundary protections and data segmentation</li></ul><p><b>
Compliance Implementation (CMMC/NIST 800-171)</b></p><ul><li>
Map CMMC practices to technical controls and configurations</li><li>
Develop and maintain:<ul><li>
System Security Plan (SSP)</li><li>
Control narratives</li><li>
Evidence repository</li><li>
POA&amp;M</li></ul></li><li>
Implement:<ul><li>
MFA/Conditional Access</li><li>
Device compliance &amp; endpoint hardening</li><li>
Logging/monitoring/SIEM integration</li><li>
DLP &amp; data classification</li><li>
Incident response workflows</li></ul></li><li>
Lead readiness reviews and assessment preparation with C3PAOs</li></ul><p><b>
Security Operations</b></p><ul><li>
Own security baselines and tenant hardening</li><li>
Manage vulnerability remediation lifecycle</li><li>
Oversee incident investigations and root cause analysis</li><li>
Establish monitoring, alerting, and audit logging standards</li><li>
Drive continuous improvement of controls</li></ul><p><b>
Cross-Functional Leadership (IC4 Scope)</b></p><ul><li>
Serve as technical authority for GCC High security decisions</li><li>
Provide guidance to operations engineers and offshore support</li><li>
Partner with Legal/Compliance on regulatory interpretation</li><li>
Present risk posture and compliance metrics to leadership</li><li>
Mentor junior engineers (without direct management responsibility)</li></ul><br>
<b>
Qualifications</b><br>
<ul><li>
U.S. Person (citizen or permanent resident) &ndash; required for GCC High/CUI access.</li><li>
6&ndash;10+ years Microsoft 365/Azure security engineering experience.</li><li>
Hands-on implementation of GCC High or FedRAMP/DoD environments.</li><li>
Direct experience with:<ul><li>
CMMC or NIST 800-171 control implementation</li><li>
Intune &amp; endpoint security</li><li>
Entra ID Conditional Access/PIM</li><li>
Defender suite</li><li>
Purview (DLP/eDiscovery/Insider Risk)</li></ul></li><li>
Experience preparing for security audits or assessments.</li><li>
Strong technical documentation skills.</li></ul><p><b>
Extras:</b></p><ul><li>
CISSP, CISM, or Security+</li><li>
Microsoft SC-100, SC-200, SC-300, MS-102</li><li>
Gov/DoD contracting environment experience</li></ul><br>
<b>
Additional Information</b><p><b><br>
Work Personas</b></p><p>
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.</p><p><b>
Equal Opportunity Employer</b></p><p>
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.</p><p><b>
Accommodations</b></p><p>
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact globaltalentss@servicenow.com for assistance.</p><p><b>
Export Control Regulations</b></p><p>
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.</p><p>
From Fortune. &copy;2025 Fortune Media IP Limited. All rights reserved. Used under license.</p></div>

Staff Security & Compliance Engineer- M365 GCCH/ CMMC

Berkshire Hathaway Specialty Insurance

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join our Boston-based IT Governance Risk Audit and Compliance (GRAC) team as a Senior IT Compliance Analyst. In this role, the IT Senior Compliance Analyst will take an active role in the execution of our IT audit and compliance framework, while collaborating closely with both internal and external partners. This position offers the chance to make a significant impact, working with external global regulators and collaborating with internal regional legal and compliance leaders across regions from an enterprise-wide vantage point. If you're passionate about driving meaningful change, growing your career, and helping lead an evolving global IT audit and compliance program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead in executing IT audit/compliance activities, and follow up with responsible parties regarding outstanding requests, and/or questions.</li><li>
Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.</li><li>
Conduct audit readiness assessments (i.e., health checks) and assess the effectiveness of current controls and processes in place.</li><li>
Lead in developing, implementing, and executing additional internal IT audit/compliance activities.</li><li>
Coordinate with team members regarding the remediation status of closing out identified audit gaps and ensuring compensating controls are implemented.</li><li>
Review third-party service providers/vendors as part of IT due diligence, including assessing vendor control environment, reviewing SOC reports (i.e., SOC 2 type 2 reports), validating security certifications, identifying control gaps, and ensuring required remediation or compensating controls.</li><li>
Analyze and support compliance with global IT regulatory authorities (i.e., GDPR, CBI, DORA, MAS, APRA, BAFIN, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of external audit requests and obligations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li><li>
Support in AI risk and governance oversight to ensure responsible and compliant use of AI technologies.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience working in an IT audit/compliance function with a general understanding (at minimum) in several of the IT audit/compliance topics listed below:</li><li>
Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.</li><li>
Software development and IT operations knowledge to assess the planning and ongoing maintenance of DevSecOps practices and Application security.</li><li>
Knowledge of cloud governance, cloud technology and cloud security is a plus.</li></ul></div><div><ul><li>
Solid background knowledge of US domestic IT regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><div></div><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Compliance Analyst

MFS Investment Management

<p><b>J</b>At MFS, you will find a culture that supports you in doing what you do best. Our employees work together to reach better outcomes, favoring the strongest idea over the strongest individual. We put people first and demonstrate care and compassion for our community and each other. Because what we do matters &ndash; to us as valued professionals and to the millions of people and institutions who rely on us to help them build more secure and prosperous futures.</p><p>THE ROLE</p><p>The Manager of Identity Security plays a pivotal role in ensuring the reliable operation, robust administration, and continual advancement of the organization&rsquo;s Identity Governance and Administration (IGA) Platform. This position is tasked with streamlining onboarding procedures, driving system enhancements, and managing critical Joiner, Mover, and Leaver (JML) processes. In close partnership with business units and cross-functional teams, the manager champions platform adoption, fosters product innovation, and actively supports the organization&rsquo;s digital transformation initiatives.</p><p>Key responsibilities include leading the seamless integration and ongoing optimization of the platform, overseeing access modeling, orchestrating SaaS workflow automations, and managing governance for Infrastructure as a Service (IaaS) environments. The manager is accountable for ensuring the deployment and maintenance of comprehensive identity security solutions that safeguard organizational assets and data.</p><p>The IGA Manager also partners with business stakeholders to evaluate and propel product innovation, supervises technical teams dedicated to identity application support, and enforces best practices to achieve interoperability and regulatory compliance. Operationally, the manager is responsible for delivering reliable services, resolving incidents promptly, and upholding compliance with internal controls and audit requirements, all while aligning with the organization&rsquo;s strategic technology goals and risk management frameworks.</p><p>As an integral member of the broader team, the manager collaborates across departments to ensure the IGA platform is continuously supported, proactively monitored, and that deployment practices adhere to established CI/CD pipelines for ongoing application enhancements and operational excellence.</p><p>WHAT YOU WILL DO</p><p>Team Leadership &amp; Development</p><ul><li>Manage a team comprised of Identity application engineers, including hiring, training and development, performance management, and compensation recommendations.</li><li>Provide coaching, feedback, and mentoring to team members to support professional growth.</li></ul><p>Operations &amp; Service Delivery</p><ul><li>Oversee daily operations of Identity Security services team. This includes but is not limited to runtime environments, running on Linux and windows-based platforms but also supporting SaaS or cloud integration points of the products and team. As a member of the larger Platform Engineering team, handling other teams that support messaging, workload scheduling platform, file transfer platform would be expected. Other occasional work supporting other teams, cloud teams and helping with provisioning/de-provisioning, (SSO, MFA, RBAC).</li><li>Ensure timely delivery of incident resolution, service requests, and projects that are small team to large enterprise corporate projects.</li><li>Maintain compliance with internal controls, audit standards, and access management policies.</li><li>Ensure platform applications are highly monitored, provide continuous review and enhancements for operational efficiencies, forecast strategic roadmaps and visions and provide reliable goals and design models.</li></ul><p>Planning &amp; Project Support</p><ul><li>Contribute to the development of roadmaps and migration strategies for Platform engineering and Identity Security platforms.</li><li>Support project delivery by assigning resources, engaging business resource needs, defining stories and tasks, monitoring progress, and ensuring on-time execution with routine executive summaries and updates.</li><li>Partner with peer architects and senior managers on initiatives involving cloud integration, enhanced monitoring, orchestration initiatives, agile project development and other key corporate enhancements.</li></ul><p>Risk &amp; Compliance</p><ul><li>Support risk management efforts by embedding security and access controls into service delivery.</li><li>Ensure audit readiness and regulatory compliance for best practices for tasks and controls assigned to the team.</li></ul><p>Reporting &amp; Vendor Management</p><ul><li>Maintain and enforce team documentation, operational dashboards, and reliable metrics for tracking service performance and project outcomes.</li><li>Coordinate vendor interactions and assist in monitoring costs and budget adherence.</li></ul><p>Additional Duties</p><ul><li>Perform additional responsibilities assigned to support departmental and organizational goals.</li></ul><p>WHAT WE ARE LOOKING FOR</p><ul><li>Bachelor&rsquo;s degree or equivalent experience.</li><li>6&ndash;8+ years of experience in an IAM/IGA technology, with at least 2 years in a leadership or supervisory capacity.</li><li>Expert knowledge of Platform operations and integration (e.g., application servers, integration tools) and Identity and Access Management solutions (e.g., Azure AD, SailPoint).</li><li>Strong understanding of IT service management (incident, change, problem).</li><li>Demonstrated ability to coach and develop staff, manage performance, and allocate resources effectively.</li><li>Ability to communicate clearly across technical and business stakeholders.</li></ul><p>#LI-SS1</p><p>Base Salary Range: $123,000 - $177,500</p><p>At MFS, we believe in fair and transparent compensation. For that reason, we&rsquo;re including the salary range for this position. This range reflects our good-faith expectation for what we&rsquo;ll pay depending on the candidate&rsquo;s experience, training and education. In addition to the salary, we also offer significant and competitive incentive compensation based on both individual and company performance. Other components of our Total Rewards Package include:</p><ul><li>MFS contributes an amount equal to 15% of your base salary to your retirement account that is separate from the company -sponsored 401(k)</li><li>Education Assistance: MFS contributes $100 monthly up to $10,000 lifetime maximum directly to loan provider</li><li>Education Assistance: Tuition reimbursement up to $8,000 annually</li><li>Education Assistance: Access to discounted tutors and college coaches</li><li>Generous time off and fully paid leaves including 20-weeks for maternity, 12-weeks for parental and caregiver leaves</li><li>Choice of medical and dental plans and an and an employer contribution into the Health Savings Account</li><li>Tax deferred commuter benefits &amp; flexible spending accounts (medical &amp; dependent care)</li><li>Wellness Programs: Robust wellness webinars, employee assistance program with a focus on mental health, subsidized fitness benefit via Wellhub (formerly Gympass), where you can workout at gyms, studios and boutique fitness locations near you, join virtual personal training sessions and access a wide variety of well-being apps</li></ul><p>Our compensation philosophy is to pay competitively for talent while ensuring equity across employees performing comparable work. We are committed to transparency &ndash; if you have questions about how we arrived at this range or what additional benefits and bonus opportunities come with the role, we&rsquo;ll be happy to discuss them</p><p>#LI-HYBRID</p><p>At MFS, we are dedicated to building a diverse, inclusive and authentic workplace. If you are excited about this role but your past experience doesn't align perfectly, we encourage you to apply - you might be just the right candidate for this role or others.</p><p>MFS is a <b>hybrid work environment</b> (remote/onsite) unless otherwise stated in the job posting.</p><p>If any applicant is unable to complete an application or respond to a job opening because of a disability, please contact MFS at 617-954-5000 or email talent_acquisition@mfs.com for assistance.</p><p><i>MFS is an Equal Opportunity Employer and it is our policy to not discriminate against any employee or applicant for employment because of race, color, religion, sex, national origin, age, marital status, sexual orientation, gender identity, genetic information, disability, veteran status, or any other status protected by federal, state or local laws. Employees and applicants of MFS will not be subject to harassment on the basis of their status. Additionally, retaliation, including intimidation, threats, or coercion, because an employee or applicant has objected to discrimination, engaged or may engage in filing a complaint, assisted in a review, investigation, or hearing or have otherwise sought to obtain their legal rights under any Federal, State, or local EEO law is prohibited. Please see the Know Your Rights: Workplace Discrimination is Illegal document, linked for your reference.</i></p><p>Pay: $125,699.47 - $151,380.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>Dental insurance</li><li>Flexible schedule</li><li>Health insurance</li><li>Paid time off</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Work Location: Hybrid remote in Boston, MA 02199</p>

Manager Platform Engineering

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join their Boston-based IT Governance Risk Audit &amp; Compliance (GRAC) team as an IT Senior Risk Analyst. In this newly created role, the IT Senior Risk Analyst will support and mature the IT Risk Management pillar, ensuring technology risks are proactively identified, assessed, communicated, and monitored across the enterprise. This role will build strong partnerships with Technology leadership and collaborate closely with teams across BHSI to evaluate our IT risk posture, provide independent challenge, and recommend practical risk‑reducing actions aligned with our established risk appetite. If you're passionate about elevating enterprise IT risk practices, driving meaningful change, and growing your career as a key contributor to our evolving global IT risk program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead risk identification, risk assessment, and ongoing monitoring; maintain the IT risk register and ensure risks map to business objectives and risk appetite/tolerances.</li><li>
Drive Risk and Control Self‑Assessments (RCAs) with different risk and control owners; advise on control design for identity &amp; access, change/release, resiliency/DR, cloud security, data protection, and vulnerability management.</li><li>
Define and socialize KRIs/KPIs, risk dashboards, trends, and heat maps; deliver clear status to Technology leadership, and key stakeholders.</li><li>
Partner with Vendor Risk Management Team to evaluate critical vendors (including AI‑enabled services), review SOC reports/certifications, assess control gaps, and track remediation/compensating controls through closure.</li><li>
Track risk issues, action plans, and target dates; validate remediation and retest where needed; participate in lessons‑learned and scenario exercises.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of IT risk related requests and obligations.</li><li>
Assess AI/automation use cases for explainability, privacy, security, and bias risk; ensure appropriate documentation, monitoring, and governance are in place.</li><li>
Educate teams on risk expectations, evidence quality, and the &ldquo;why&rdquo; behind controls; help embed risk thinking into delivery and operations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience in IT risk, IT audit/compliance, or cyber GRC.</li><li>
Experience running RCSAs, defining KRIs/KPIs, and presenting risk insights to senior stakeholders.</li><li>
Strong documentation skills, including writing risk narratives, control designs, control matrices, testing procedures, and remediation plans.</li><li>
Effective communication and partnership skills; able to challenge constructively and receive challenge professionally.</li><li>
Experience conducting vendor risk reviews, including SOC 2 analysis, control gap identification, and remediation follow‑up.</li><li>
Solid background knowledge of major risk and control frameworks (Technology, Cyber, Enterprise), such as NIST CSF, COSO ERM, COBIT, etc.</li><li>
Working knowledge of U.S. IT regulations (e.g., SOX, CCPA/CPRA, PCI, NY‑DFS) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li></ul></div><div><ul><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><p></p><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Risk Analyst

StemWave

<div>
 <p>
  <strong>
   Location:
  </strong>
  4 Gill Street, Unit B, Woburn, MA 01801
 </p>
 <p>
  <strong>
   Reports To:
  </strong>
  Lead Quality Manager
 </p>
 <p>
  <strong>
   Employment Type:
  </strong>
  Full-Time, In-Office
 </p>
 <p>
  <strong>
   Compensation:
  </strong>
  $100,000-$110,000
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Company Description
  </strong>
 </p>
 <p>
  StemWave is a fast-growing medical device company based in Massachusetts, pioneering orthopedic shockwave technology in the U.S. Our technology is helping change the lives of practitioners and patients by advancing healing and expanding access to effective, non-invasive pain management solutions. Recognized among the fastest-growing privately held companies in 2023 and 2024, we are continuing to expand our team and capabilities to support rapid growth.
 </p>
 <p>
  <br/>
 </p>
 <p>
  We operate at the crossroads of medical device and technology, combining the rigor of a regulated healthcare environment with the speed, ownership, and innovation of a scaling tech company. People are at the center of our growth, and we are building a team of motivated, collaborative individuals who take pride in meaningful work and tangible results.
 </p>
 <p>
  <br/>
 </p>
 <p>
  We hold high standards and believe great performance thrives in an environment that is collaborative, energized, and genuinely enjoyable to be part of. This is a high-ownership culture where strong ideas are welcomed, teamwork matters, and each new hire plays a meaningful role in shaping the organization we are becoming.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Position Summary
  </strong>
 </p>
 <p>
  StemWave is seeking a
  <strong>
   Quality Engineer
  </strong>
  to help drive medical device quality and
 </p>
 <p>
  compliance initially by supporting our current design and development project, and
 </p>
 <p>
  eventually future manufacturing and postmarket activities. This is a hands-on role
 </p>
 <p>
  working side by side with the Engineering team, which will focus on the execution and
 </p>
 <p>
  maintenance of design documentation, risk management efforts, traceability matrices,
 </p>
 <p>
  design verification protocols and reports, and the structure of the project Design and
 </p>
 <p>
  Development File. The role is execution-focused and will work closely with QA
 </p>
 <p>
  leadership and the Engineering Team.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What You'll Do:
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Contribute to design and development process:
   </strong>
   requirements traceability, verification planning, design transfer readiness, and DDF/MDF documentation.
  </li>
  <li>
   <strong>
    Execute risk management activities:
   </strong>
   Hazards Analysis, FMEAs including DFMEA PFMEA, and ensure alignment to ISO 14971 across lifecycle phases.
  </li>
  <li>
   <strong>
    Support design verification validation (V&amp;V) activities
   </strong>
   by working closely with the Engineering Team on planning, documentation, and change control.
  </li>
  <li>
   <strong>
    Drive verification/validation (V&amp;V)
   </strong>
   for processes and equipment (IQ/OQ/PQ), including protocol/report contributions and objective evidence review.
  </li>
  <li>
   <strong>
    Help lead adoption of Greenlight Guru Ultralight eQMS,
   </strong>
   including implementing requirements traceability matrices, risk management activities, and document control and change management.
  </li>
  <li>
   <strong>
    Implement &amp; Improve the QMS:
   </strong>
   author/revise SOPs and Templates; contribute to internal audits and readiness for future external audits.
  </li>
  <li>
   <strong>
    Support supplier quality:
   </strong>
   draft incoming inspection plans, SCARs, and change control creation and review for purchased components and assemblies.
  </li>
  <li>
   <strong>
    Enhance production quality:
   </strong>
   implement sampling plans (ANSI/ASQ Z1.4), IQ/OQ/PQ, GR&amp;amp; R/MSA, and in-process controls and quality testing.
  </li>
  <li>
   <strong>
    Lead CAPA &amp; Nonconformance workflows:
   </strong>
   triage, root cause investigations, corrective/preventive actions, effectiveness verification, and timely closure.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What We&rsquo;re Looking For:
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in engineering or related technical field.
  </li>
  <li>
   3&ndash;5 years of quality engineering experience in medical devices (Class II preferred).
  </li>
  <li>
   <strong>
    Knowledge of FDA QMSR 21 CFR Part 820, ISO 13485, and ISO 14971.
   </strong>
  </li>
  <li>
   Experience with design quality assurance, working as the Quality representative on cross-functional project teams in a fast-paced development environment.
  </li>
  <li>
   Hands-on experience leading risk management, requirements traceability, and design verification and validation activities and documentation.
  </li>
  <li>
   Robust documentation, rigor, and
   <strong>
    experience with Greenlight Guru Ultralight eQMS.
   </strong>
  </li>
  <li>
   Strong attention to detail and ability to manage multiple documentation streams in parallel
  </li>
  <li>
   Demonstrated success managing CAPA, closing NCRs, and writing verification and
   <strong>
    validation protocols
   </strong>
   and reports.
  </li>
  <li>
   Proficiency with statistics for quality, including sampling plans for verification and validation, and inspection and tools such as Minitab and advanced Excel.
  </li>
  <li>
   Excellent cross-functional communication;
   <strong>
    comfortable partnering with Engineering,
   </strong>
   Operations, and Regulatory.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Benefits
  </strong>
 </p>
 <ul>
  <li>
   Unlimited Paid Time Off
  </li>
  <li>
   14 Paid Company Holidays
  </li>
  <li>
   Comprehensive Health Coverage: Medical, dental, and vision insurance - 100% employer paid
  </li>
  <li>
   HSA Option: Add a Health Savings Account to a high-deductible health plan
  </li>
  <li>
   Paid Parental Leave
  </li>
  <li>
   Employee Referral Program: Earn rewards for helping us grow our team
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Why Join Us
  </strong>
 </p>
 <ul>
  <li>
   <strong>
    Leadership:
   </strong>
   Help practices and medical centers adopt groundbreaking technology that empowers patients and allows practitioners to offer versatile treatment options
  </li>
  <li>
   <strong>
    Exposure:
   </strong>
   Work closely with key decision-makers in the healthcare space, expanding your network and influence in a rapidly growing industry
  </li>
  <li>
   <strong>
    Growth:
   </strong>
   Join an energetic and innovative culture where your ideas are valued. You&rsquo;ll have the opportunity to contribute to company growth, take on new projects, and further your career
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <em>
   At StemWave, we're not just building devices, we're building a movement. Join us and be a key contributor to our growth and success.
  </em>
 </p>
</div>


Quality Engineer

Explore 223+ Senior associate tech assurance sap security controls in Boston this March. Find roles across top companies and apply now to boost your career.