Job Description:
Key Responsibilities
1. Workday Security Product Ownership
- Own the overall Workday Security product roadmap, strategy, and governance.
- Define and maintain security principles, standards, and operating procedures.
- Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.
- Act as the primary security SME and escalation point for Workday.
- Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.
2. Workday Security Architecture & Configuration
- Design, configure, and govern:
- Role-Based Security Groups
- User-Based Security Groups
- Domain Security Policies
- Business Process Security Policies
- Segmentation
- Organization-based security
- Constrained/unconstrained security
- Integration System Users and integration security
- Workday reporting security
- Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.
- Ensure appropriate least-privilege access and segregation of duties.
- Conduct security impact assessments for Workday releases and major changes.
3. IT Controls / JSOX / Audit
- Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.
- Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.
- Ensure appropriate evidence is produced and retained for audit requirements.
- Partner with Internal Audit, Compliance, Risk, and external auditors.
- Identify security control gaps and drive remediation through to closure.
- Maintain security control documentation, control narratives, RACI and evidence requirements.
4. Access Governance
- Establish and govern processes for:
- Joiner/Mover/Leaver access
- Elevated/privileged access
- Temporary access
- Service accounts and ISUs
- Security group ownership
- Periodic access certification
- Monitor inappropriate or excessive access and ensure timely remediation.
- Establish appropriate approval workflows for sensitive Workday access.
5. Workday Release & Product Management
- Lead security assessment for Workday biannual releases.
- Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.
- Coordinate security regression testing and validation.
- Ensure security changes are incorporated into release/change management processes.
- Maintain a forward-looking security roadmap aligned with Workday product evolution.
Required Skills & Experience
- 7+ years of Workday experience, with significant hands-on experience in Workday Security.
- Workday Security certification.
- Strong expertise in:
- Workday HCM
- Workday Security Administration
- Domain Security
- Business Process Security
- Role-Based and User-Based Security Groups
- Integration Security
- Strong understanding of Workday security architecture and security design principles.
- Experience with ITGC, SOX/JSOX, audit and compliance controls.
- Experience leading User Access Reviews / Role-Based Security Reviews.
- Experience working with Internal Audit, external auditors and Information Security teams.
- Strong understanding of RBAC, least privilege, segregation of duties and access governance.
- Experience managing Workday security in a large/global enterprise environment.
- Strong stakeholder management and communication skills.
- Ability to translate business and compliance requirements into practical Workday security solutions.
Location:
Bangalore
Brand:
Bcoe
Time Type:
Full time
Contract Type:
Permanent
