Product Owner

Job Description:

Key Responsibilities

1. Workday Security Product Ownership

• Own the overall Workday Security product roadmap, strategy, and governance.
• Define and maintain security principles, standards, and operating procedures.
• Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.
• Act as the primary security SME and escalation point for Workday.
• Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.

2. Workday Security Architecture & Configuration

• Design, configure, and govern:
  • Role-Based Security Groups
  • User-Based Security Groups
  • Domain Security Policies
  • Business Process Security Policies
  • Segmentation
  • Organization-based security
  • Constrained/unconstrained security
  • Integration System Users and integration security
  • Workday reporting security
• Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.
• Ensure appropriate least-privilege access and segregation of duties.
• Conduct security impact assessments for Workday releases and major changes.

3. IT Controls / JSOX / Audit

• Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.
• Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.
• Ensure appropriate evidence is produced and retained for audit requirements.
• Partner with Internal Audit, Compliance, Risk, and external auditors.
• Identify security control gaps and drive remediation through to closure.
• Maintain security control documentation, control narratives, RACI and evidence requirements.

4. Access Governance

• Establish and govern processes for:
  • Joiner/Mover/Leaver access
  • Elevated/privileged access
  • Temporary access
  • Service accounts and ISUs
  • Security group ownership
  • Periodic access certification
• Monitor inappropriate or excessive access and ensure timely remediation.
• Establish appropriate approval workflows for sensitive Workday access.

5. Workday Release & Product Management

• Lead security assessment for Workday biannual releases.
• Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.
• Coordinate security regression testing and validation.
• Ensure security changes are incorporated into release/change management processes.
• Maintain a forward-looking security roadmap aligned with Workday product evolution.

Required Skills & Experience

• 7+ years of Workday experience, with significant hands-on experience in Workday Security.
• Workday Security certification.
• Strong expertise in:
  • Workday HCM
  • Workday Security Administration
  • Domain Security
  • Business Process Security
  • Role-Based and User-Based Security Groups
  • Integration Security
• Strong understanding of Workday security architecture and security design principles.
• Experience with ITGC, SOX/JSOX, audit and compliance controls.
• Experience leading User Access Reviews / Role-Based Security Reviews.
• Experience working with Internal Audit, external auditors and Information Security teams.
• Strong understanding of RBAC, least privilege, segregation of duties and access governance.
• Experience managing Workday security in a large/global enterprise environment.
• Strong stakeholder management and communication skills.
• Ability to translate business and compliance requirements into practical Workday security solutions.

Location:

Brand:

Time Type:

Contract Type: