Workday Security/System Admin Lead

Role & responsibilities

Workday Systems Administrator / Security Lead:

Job Description :

Goals & Objectives: Workday Systems Administrator will work closely with the Workday Team Lead, Workday Functional Leads, Workday Architect and Workday Developer to ensure smooth, compliant functioning of Workday across all system users.

The Workday Administrator will play a key role in allowing Workday to reach its full capabilities in balance with controlled and thoughtful access, security and enhancement protocols.

• This role is the operational owner for Workday and Adaptive access control, Support Org escalation, least-privilege role assignment, vendor/offshore access protocol, security evidence retention, and admin-to-Jira escalation when support cases require functional, reporting, development, or production-change work.

Job Functions

Establish and Maintain Workday/Adaptive User Security and Access (50%)

• Configure, maintain and advise on security within Workday application and Adaptive. This includes domain security policies, roles, and role assignments. May include implementation of hierarchy changes.
• Assist new employees with initial Workday access needs.
• Develop and maintain awareness of divisional and data security and comply with policies and procedures.
• Participate in report reviews, including understanding and ensuring security and data privacy standards.
• Stay updated on new security features within the applications future roadmap, and implement where possible.
• Maintain role-based access profiles for WEG, vendor, offshore, implementer, and support users; ensure access is named-user based, least-privilege, approved, time-bound where appropriate, and reviewed on a defined cadence.
• Coordinate offshore/vendor Workday access protocols, including VDI/VPN/MFA or other InfoSec-approved access controls, data-download restrictions, user monitoring, emergency deactivation, and evidence of approval.
• Create and maintain an access decision log and security role matrix showing who approved access, what access was granted, why it was needed, when it expires, and when it was last reviewed.

Support Business Resiliency :

• Partner closely with Internal and External Audit teams, IT Security Teams, and other teams such as Business Resiliency to ensure measures are in place for business continuity.
• Support business continuity for Workday access by defining backup administrators, emergency access procedures, vendor/offshore offboarding steps, and rapid revocation procedures for users who transfer, terminate, or roll off vendor engagements.

Enable Compliant System Changes / Tenant Management:

• Runs point on tenant management to ensure access, testing and moves to production comply with company policy and procedures.
• Coordinate with vendors to understand new technology scope and association with new functionality and security. Partners closely with Workday Team Lead on Workday Releases and ensures execution is in line with existing protocols.
• Works with Workday Functional Leads and Reporting/Dashboards Lead on calculated fields creation.
• Assist with running mass EIBs to ensure accuracy.
• Own Support Org / Help Desk routing for Workday admin cases; resolve basic access and support items directly and escalate to Jira when a case requires functional configuration, report development, technical build, security review, or production-impacting change.
• Confirm correct tenant use for development, sandbox, preview, and production work; ensure vendor/offshore activity occurs only in approved tenants and with approved security profiles.
• Retain evidence for data updates, EIB execution, access/security changes, tenant moves, and production-change approvals in the designated system of record.

Support Audit Activities :

• Perform audits on system roles and access logs to ensure accuracy.
• Demonstrate proof of security controls during internal and external audits.
• Perform recurring reviews of implementer accounts, proxy access, failed sign-ons, user-based assignments, role-based assignments, report admin/report writer access, and offshore/vendor access activity.
• Partner with Reporting Lead and Functional Leads to review scheduled reports, sensitive fields, report output sharing, and security implications of reporting changes.