Workday Security Lead/Architect

Experience:

- 8+ years of progressive experience in Workday security administration and governance

- Proven track record of leading security initiatives and collaborating with cross-functional teams

- Demonstrated expertise in navigating complex regulatory environments and compliance frameworks

- Professional certifications: Workday Security Certification

Functional Skills:

- Expert-level knowledge of Workday security architecture, including security roles, permissions, and access control mechanisms

- Comprehensive understanding of identity and access management (IAM) principles, including user provisioning, SSO, and multi-factor authentication

- In-depth knowledge of data privacy regulations (e.g., GDPR, HIPAA) and their implications for HR data management

- Familiarity with security frameworks and control standards (e.g., NIST, ISO, SOC 2) applicable to HR systems

- Experience conducting security assessments, risk analyses, and vulnerability management

Technical Skills:

- Proficient in configuring and administering Workday security features, including security policies, audit logging, and data masking

- Expertise in integrating Workday with identity providers, HR systems, and other enterprise applications using APIs, web services, and file-based interfaces

- Strong understanding of data encryption, access controls, and secure data exchange protocols

- Hands-on experience with security testing tools, vulnerability scanners, and penetration testing methodologies

- Familiarity with cloud security best practices and controls for SaaS applications

Governance & Compliance:

- Ability to develop and maintain comprehensive security documentation, including security design, risk assessments, and control frameworks

- Experience in leading security audits, incident response, and remediation efforts

- Knowledge of regulatory requirements and industry standards applicable to HR data management and employee privacy

- Familiarity with change management processes and their impact on security controls