Workday Security Administrator
Role details
Job location
Tech stack
Job description
This role serves as the strategic owner of Workday security architecture, ensuring secure, compliant, and scalable access across all HCM modules, reporting, and integrations. The individual is accountable for Workday security controls, SOX compliance, and audit execution, partnering closely with HR, Technology, Risk, and Compliance stakeholders. Acting as a subjectmatter expert, the role proactively identifies risk, strengthens controls, and enables business operations through thoughtful, wellgoverned security design. Responsibilities
- Serve as the primary Workday Security subjectmatter expert, responsible for endtoend security design across all HCM modules, reporting, and integrations.
- Own and execute Workday security controls related to SOX and internal/external audits, including access reviews, evidence preparation, remediation of findings, and ongoing control optimization.
- Initiate and lead conversations with stakeholders, HR partners, Risk, Compliance, and Technology teams to understand access needs, build trust, and deliver secure, compliant solutions in complex and crossfunctional environments.
- Design, implement, and maintain rolebased and domain security, ensuring appropriate segregation of duties, data privacy, and alignment with compliance and audit requirements.
- Partner closely with Risk, Compliance, and Internal Audit teams to ensure security configurations meet organizational policies, regulatory expectations, and audit standards.
- Provide expert analysis of security configuration, identifying gaps, risks, inefficiencies, or unintended access, and recommending mitigation strategies.
- Support Workday reporting and integration security, ensuring appropriate data access, secure data transmission, and compliance with internal control frameworks.
- Successfully prioritize and manage securityrelated work across large initiatives, ongoing enhancements, defects, audit activities, and access requests, aligned with overall HR and technology strategy.
- Develop and maintain clear documentation for security designs, SOX controls, audit evidence, standards, and decision rationale.
- Proactively monitor upcoming Workday releases and evaluate new security functionality to identify opportunities to strengthen controls, improve audit outcomes, and increase efficiency.
- Act as a trusted advisor by anticipating security and compliance risks before they emerge and translating complex security concepts into clear, actionable guidance for stakeholders.
Requirements
- Bachelor's Degree
- Demonstrates deep expertise and a proven record of success in Workday Security, including HCM (Compensation, Payroll, Time Off and Absence, Benefits, etc.), reporting, and integration security.
- Extensive experience designing and maintaining rolebased security models within Workday, with a strong understanding of domain, business process, and reporting security.
- Proven experience supporting SOX controls, internal audits, and external audits, including evidence collection, access reviews, and remediation activities.
- Ability to translate business and functional requirements into secure technical solutions, and to clearly communicate security and compliance impacts to both technical and nontechnical audiences.
- Strong experience performing rootcause analysis on security and access issues, with an understanding of crossstream and downstream impacts.
- Demonstrated ability to work independently as an individual contributor at the Manager level, managing complex priorities and accountability without people management responsibility.
- Effective communication skills to articulate security strategy, risk, and compliance requirements, and to build trust with stakeholders.
- Workday Security Certifications are a plus.
Preferred Qualifications
- Experience partnering with Internal Audit, Risk, or Compliance teams in a SOXregulated environment.
- Ability to think globally about security and compliance impacts while managing detailed configuration requirements.
- Strong decisionmaking skills to navigate competing priorities, audit deadlines, and complex security scenarios., RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate.
Benefits & conditions
At RSM, we offer a competitive benefits and compensation package for all our people.We offer flexibility in your schedule, empowering you to balance life's demands, while also maintaining your ability to serve clients.Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits.