Job Description: Key Responsibilities 1. Workday Security Product Ownership • Own the overall Workday Security product roadmap, strategy, and governance. • Define and maintain security principles, standards, and operating procedures. • Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog. • Act as the primary security SME and escalation point for Workday. • Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design. 2. Workday Security Architecture & Configuration • Design, configure, and govern: • Role-Based Security Groups • User-Based Security Groups • Domain Security Policies • Business Process Security Policies • Segmentation • Organization-based security • Constrained/unconstrained security • Integration System Users and integration security • Workday reporting security • Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes. • Ensure appropriate least-privilege access and segregation of duties. • Conduct security impact assessments for Workday releases and major changes. 3. IT Controls / JSOX / Audit • Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits. • Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews. • Ensure appropriate evidence is produced and retained for audit requirements. • Partner with Internal Audit, Compliance, Risk, and external auditors. • Identify security control gaps and drive remediation through to closure. • Maintain security control documentation, control narratives, RACI and evidence requirements. 4. Access Governance • Establish and govern processes for: • Joiner/Mover/Leaver access • Elevated/privileged access • Temporary access • Service accounts and ISUs • Security group ownership • Periodic access certification • Monitor inappropriate or excessive access and ensure timely remediation. • Establish appropriate approval workflows for sensitive Workday access. 5. Workday Release & Product Management • Lead security assessment for Workday biannual releases. • Review new security features, changes to existing security functionality, and Workday-delivered security enhancements. • Coordinate security regression testing and validation. • Ensure security changes are incorporated into release/change management processes. • Maintain a forward-looking security roadmap aligned with Workday product evolution. Required Skills & Experience • 7+ years of Workday experience, with significant hands-on experience in Workday Security. • Workday Security certification. • Strong expertise in: • Workday HCM • Workday Security Administration • Domain Security • Business Process Security • Role-Based and User-Based Security Groups • Integration Security • Strong understanding of Workday security architecture and security design principles. • Experience with ITGC, SOX/JSOX, audit and compliance controls. • Experience leading User Access Reviews / Role-Based Security Reviews. • Experience working with Internal Audit, external auditors and Information Security teams. • Strong understanding of RBAC, least privilege, segregation of duties and access governance. • Experience managing Workday security in a large/global enterprise environment. • Strong stakeholder management and communication skills. • Ability to translate business and compliance requirements into practical Workday security solutions. Location: Bangalore Brand: Bcoe Time Type: Full time Contract Type: Permanent