Job Description:

Key Responsibilities

1. Workday Security Product Ownership

- Own the overall Workday Security product roadmap, strategy, and governance.
- Define and maintain security principles, standards, and operating procedures.
- Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.
- Act as the primary security SME and escalation point for Workday.
- Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.

2. Workday Security Architecture & Configuration

- Design, configure, and govern:
- Role-Based Security Groups
- User-Based Security Groups
- Domain Security Policies
- Business Process Security Policies
- Segmentation
- Organization-based security
- Constrained/unconstrained security
- Integration System Users and integration security
- Workday reporting security

- Review and approve security changes associated with recent Workday functionality, integrations, reports, and business processes.
- Ensure appropriate least-privilege access and segregation of duties.
- Conduct security impact assessments for Workday releases and major changes.

3. IT Controls / JSOX / Audit

- Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.
- Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.
- Ensure appropriate evidence is produced and retained for audit requirements.
- Partner with Internal Audit, Compliance, Risk, and external auditors.
- Identify security control gaps and drive remediation through to closure.
- Maintain security control documentation, control narratives, RACI and evidence requirements.

4. Access Governance

- Establish and govern processes for:
- Joiner/Mover/Leaver access
- Elevated/privileged access




- Temporary access
- Service accounts and ISUs
- Security group ownership
- Periodic access certification

- Monitor inappropriate or excessive access and ensure timely remediation.
- Establish appropriate approval workflows for sensitive Workday access.

5. Workday Release & Product Management

- Lead security assessment for Workday biannual releases.
- Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.
- Coordinate security regression testing and validation.
- Ensure security changes are incorporated into release/change management processes.
- Maintain a forward-looking security roadmap aligned with Workday product evolution.

Required Skills & Experience

- 7+ years of Workday experience, with significant hands-on experience in Workday Security.
- Workday Security certification.
- Strong expertise in:
- Workday HCM
- Workday Security Administration
- Domain Security
- Business Process Security
- Role-Based and User-Based Security Groups
- Integration Security

- Strong understanding of Workday security architecture and security design principles.
- Experience with ITGC, SOX/JSOX, audit and compliance controls.
- Experience leading User Access Reviews / Role-Based Security Reviews.
- Experience working with Internal Audit, external auditors and Information Security teams.
- Strong understanding of RBAC, least privilege, segregation of duties and access governance.
- Experience managing Workday security in a large/global enterprise environment.
- Strong stakeholder management and communication skills.
- Ability to translate business and compliance requirements into practical Workday security solutions.

Location:

Bangalore

Brand:

Bcoe

Time Type:

Full time

Contract Type:

Permanent

📌 Product Owner (Bengaluru)
🏢 dentsu
📍 Bengaluru