Job Description

Key Responsibilities

1. Workday Security Product Ownership

• Own the overall Workday Security product roadmap, strategy, and governance.
• Define and maintain security principles, standards, and operating procedures.
• Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.
• Act as the primary security SME and escalation point for Workday.
• Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.

1. Workday Security Architecture & Configuration

• Design, configure, and govern:
• Role-Based Security Groups
• User-Based Security Groups
• Domain Security Policies
• Business Process Security Policies
• Segmentation
• Organization-based security
• Constrained/unconstrained security
• Integration System Users and integration security
• Workday reporting security
• Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.
• Ensure appropriate least-privilege access and segregation of duties.
• Conduct security impact assessments for Workday releases and major changes.

1. IT Controls / JSOX / Audit

• Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.
• Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.
• Ensure appropriate evidence is produced and retained for audit requirements.
• Partner with Internal Audit, Compliance, Risk, and external auditors.
• Identify security control gaps and drive remediation through to closure.
• Maintain security control documentation, control narratives, RACI and evidence requirements.

1. Access Governance

• Establish and govern processes for:
• Joiner/Mover/Leaver access
• Elevated/privileged access
• Temporary access
• Service accounts and ISUs
• Security group ownership
• Periodic access certification
• Monitor inappropriate or excessive access and ensure timely remediation.
• Establish appropriate approval workflows for sensitive Workday access.

1. Workday Release & Product Management

• Lead security assessment for Workday biannual releases.
• Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.
• Coordinate security regression testing and validation.
• Ensure security changes are incorporated into release/change management processes.
• Maintain a forward-looking security roadmap aligned with Workday product evolution.

Required Skills & Experience

• 7+ years of Workday experience, with significant hands-on experience in Workday Security.
• Workday Security certification.
• Strong expertise in:
• Workday HCM
• Workday Security Administration
• Domain Security
• Business Process Security
• Role-Based and User-Based Security Groups
• Integration Security
• Strong understanding of Workday security architecture and security design principles.
• Experience with ITGC, SOX/JSOX, audit and compliance controls.
• Experience leading User Access Reviews / Role-Based Security Reviews.
• Experience working with Internal Audit, external auditors and Information Security teams.
• Strong understanding of RBAC, least privilege, segregation of duties and access governance.
• Experience managing Workday security in a large/global enterprise environment.
• Strong stakeholder management and communication skills.
• Ability to translate business and compliance requirements into practical Workday security solutions.

Location:

Bangalore

Brand:

Bcoe

Time Type:

Full time

Contract Type:

Permanent