Job Description:
Key Responsibilities
1. Workday Security Product Ownership
* Own the overall Workday Security product roadmap, strategy, and governance. * Define and maintain security principles, standards, and operating procedures. * Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog. * Act as the primary security SME and escalation point for Workday. * Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.
2. Workday Security Architecture & Configuration
* Design, configure, and govern: * Role-Based Security Groups * User-Based Security Groups * Domain Security Policies * Business Process Security Policies * Segmentation * Organization-based security * Constrained/unconstrained security * Integration System Users and integration security * Workday reporting security * Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes. * Ensure appropriate least-privilege access and segregation of duties. * Conduct security impact assessments for Workday releases and major changes.
3. IT Controls / JSOX / Audit
* Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits. * Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews. * Ensure appropriate evidence is produced and retained for audit requirements. * Partner with Internal Audit, Compliance, Risk, and external auditors. * Identify security control gaps and drive remediation through to closure. * Maintain security control documentation, control narratives, RACI and evidence requirements.
4. Access Governance
* Establish and govern processes for: * Joiner/Mover/Leaver access * Elevated/privileged access * Temporary access * Service accounts and ISUs * Security group ownership * Periodic access certification * Monitor inappropriate or excessive access and ensure timely remediation. * Establish appropriate approval workflows for sensitive Workday access.
5. Workday Release & Product Management
* Lead security assessment for Workday biannual releases. * Review new security features, changes to existing security functionality, and Workday-delivered security enhancements. * Coordinate security regression testing and validation. * Ensure security changes are incorporated into release/change management processes. * Maintain a forward-looking security roadmap aligned with Workday product evolution.
Required Skills & Experience
* 7+ years of Workday experience, with significant hands-on experience in Workday Security. * Workday Security certification. * Strong expertise in: * Workday HCM * Workday Security Administration * Domain Security * Business Process Security * Role-Based and User-Based Security Groups * Integration Security * Strong understanding of Workday security architecture and security design principles. * Experience with ITGC, SOX/JSOX, audit and compliance controls. * Experience leading User Access Reviews / Role-Based Security Reviews. * Experience working with Internal Audit, external auditors and Information Security teams. * Strong understanding of RBAC, least privilege, segregation of duties and access governance. * Experience managing Workday security in a large/global enterprise environment. * Strong stakeholder management and communication skills. * Ability to translate business and compliance requirements into practical Workday security solutions.
Location:
Bangalore
Brand:
Bcoe
Time Type:
Full time
Contract Type:
Permanent