Workday Security Lead

We're hiring: Workday Security Lead | HCM Security & Governance

A leading biopharmaceutical company is seeking an experienced Workday Security Lead to own the design, implementation, and governance of Workday security across all modules. As the subject matter expert (SME) for Workday security, you'll protect employee data, safeguard data integrity, and maintain compliance, partnering with HR, IT, Cybersecurity, and external partners to align security with business processes and compliance requirements.

What you'll do:

• Lead the design, configuration, and maintenance of Workday role-based, domain, and business process security policies
• Apply least-privilege and role-based access principles to protect data and ensure compliance
• Manage security workstreams for new module implementations, releases, and regression testing
• Conduct security impact assessments for new functionality and module rollouts
• Oversee integration security and service accounts (API, SSO, EIB)
• Manage access requests, user accounts, and audit logs, and perform periodic security reviews with remediation recommendations
• Develop and maintain security groups, role assignments, and provisioning and de-provisioning processes
• Build and maintain a Workday security governance framework and documentation
• Support internal audit and compliance teams with security audits and risk assessments
• Train and guide functional leads and stakeholders on Workday security best practices
• Identify process improvements and automation opportunities in access management

What you bring:

• Bachelor's degree in Information Systems, Human Resources, Computer Science, or a related field
• 8+ years of Workday experience, including 5+ years focused on security administration or design
• Deep understanding of Workday domain security, business process security policies, and role-based access control (RBAC)
• Knowledge of security frameworks and compliance standards (SOX, GDPR, HIPAA, NIST)
• Experience with key Workday modules (HCM, Recruiting, Advanced Compensation, Absence, Time Tracking, Performance, Talent)
• Expertise with SSO, integration security, and security for EIBs and reports
• Workday reporting experience (RaaS, custom reports)
• Strong analytical, problem-solving, and stakeholder management skills
• Excellent communication skills, with the ability to explain technical concepts to non-technical audiences

Nice to have:

• Workday Pro Certification (Security)