Senior Analyst, Workday Security & Access Governance

Loblaw Companies Limited; Brampton; On-site; CAD 80,000 - 110,000; Full time

Job summary

Loblaw Companies Limited is seeking a Senior Analyst, Workday Security & Access Governance to configure and govern Workday security across production and non-production environments. You will partner with HR, Finance, Technology, Cybersecurity, and Audit to implement secure, scalable Workday solutions.

The role focuses on maintaining authentication, security groups, role-based access, and policy controls, while supporting access reviews and security reporting for audits.

Qualifications

• Hands-on Workday security configuration in a large enterprise.
• Experience with security groups, role assignments, and domain security policies.
• Ability to analyze security requirements across HR, finance and IT.
• Experience with access reviews, privileged-access reviews, and audits.
• Knowledge of identity-management concepts (SAML, SSO, MFA) is a plus.

Responsibilities

• Configure, maintain, and govern Workday security across environments.
• Translate business and compliance requirements into security configurations.
• Support security changes for projects, releases, and integrations.
• Perform security impact assessments and remediation of access risks.
• Develop and maintain Workday security reports for audits.

Skills

Workday Security

Security governance

Identity and Access Management

RBAC / Domain Security Policies

Audit support

Security reporting

Tools

Kainos Smart Test

Kainos Smart Audit

Job description

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued - as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

We are seeking aSenior Analyst, Workday Security & Access Governanceto support the configuration, administration, and ongoing governance of Workday security across production and non-production environments.

In this role, you will be a hands-on Workday Security specialist responsible for configuring and maintaining authentication, security groups, role-based access, Domain Security Policies, Business Process Security Policies, and other security controls within Workday. You will partner with Human Resources, Finance, Technology, Cybersecurity, Identity and Access Management, Audit, and enterprise project teams to implement secure, scalable, and well-controlled Workday solutions.

What You’ll Do

• Configure, maintain, and troubleshoot Workday security, including security groups, role assignments, Domain Security Policies, Business Process Security Policies, user-based and role-based access, and privileged access.
• Analyze Workday security requirements and translate business, technical, risk, and compliance requirements into appropriate Workday security configurations.
• Support the design and implementation of security changes for Workday projects, enhancements, integrations, business process changes, and platform releases.
• Perform security impact assessments for proposed Workday configuration changes and identify potential access, segregation-of-duties, or control implications.
• Configure and maintain Workday authentication and access-related settings in coordination with Identity and Access Management and Cybersecurity teams.
• Investigate and resolve complex Workday access and security issues, including inappropriate access, missing permissions, role-assignment issues, security policy conflicts, and authentication-related problems.
• Support Workday access governance activities, including access reviews, privileged-access reviews, security-group assessments, role validation, segregation-of-duties analysis, and remediation of identified access risks.
• Develop and maintain Workday security reports and other reporting used to monitor access, support controls, investigate security issues, and provide audit evidence.
• Support production and non-production tenant security administration, including tenant access, environment refresh activities, security validation, test-user access, and post-refresh security remediation.
• Execute security testing for Workday configuration changes, releases, projects, and remediation activities, including development of test scenarios, validation of expected access, and documentation of test results.
• Participate in Workday release activities by assessing security-related changes, testing applicable functionality, and implementing required configuration updates.
• Maintain accurate documentation of Workday security configurations, security groups, role assignments, controls, procedures, design decisions, and operational processes.
• Support internal and external audits by producing security configuration evidence, access reports, control documentation, and responses to audit inquiries.
• Identify opportunities to improve Workday security configuration, access-governance processes, monitoring, reporting, and automation.
• Apply established change-management, security, risk, and governance standards when implementing changes within Workday environments.

What You Bring

• Strong hands-on experience configuring and administeringWorkday Securityin a large or complex enterprise environment.
• Strong knowledge of Workday’s configurable security framework, includingsecurity groups, role assignments, Domain Security Policies, Business Process Security Policies, user-based security, role-based security, and constrained security groups.
• Experience analyzing, configuring, testing, and troubleshooting Workday security across functional areas such as HCM, Payroll, Finance, Recruiting, Compensation, Benefits, or other Workday modules.
• Experience withWorkday authentication and access controls, including an understanding of enterprise identity-management concepts such as Single Sign-On, multi-factor authentication, identity lifecycle management, and role-based access control.
• Experience performingaccess reviews, privileged-access reviews, segregation-of-duties analysis, security assessments, and access remediation.
• Experience creating and using Workday reports to analyze security assignments, access permissions, security groups, and control effectiveness.
• Experience supporting Workday projects, enhancements, tenant changes, and releases, including security requirements analysis, configuration, testing, deployment, and post-production validation.
• Strong troubleshooting and analytical skills, with the ability to diagnose complex security and access issues across Workday business processes, domains, roles, and security groups.
• Understanding of security, privacy, access-control, audit, and compliance principles within an enterprise technology environment.
• Strong documentation skills and the ability to clearly explain Workday security configurations, access decisions, risks, and remediation requirements to technical and non-technical partners.
• Ability to work independently on complex security assignments while collaborating effectively with Workday functional teams, Identity and Access Management, Cybersecurity, Technology, Audit, and business stakeholders.

Preferred Skills

• Workday Pro Security, Workday Platform Administrator, or another relevant Workday certification.
• Experience usingKainos Smart Test and Kainos Smart Auditfor Workday security testing, controls monitoring, regression testing, or audit support.
• Experience with Workday security supporting multiple functional areas or large-scale Workday implementations.
• Experience working with Identity and Access Management platforms and processes, including joiner, mover, and leaver access lifecycle activities.
• Experience supporting Workday in a regulated, controls-focused, or audit-intensive enterprise environment.
• Knowledge of security-control frameworks, privacy requirements, segregation-of-duties principles, and enterprise access-governance practices.
• Relevant experience may have been gained through enterprise operations, Workday implementations, consulting, application support, or comparable technical roles.

Our commitment to Sustainability and Social Impact is an essential part of the way we do business, and we focus our attention on areas where we can have the greatest impact. Our approach to sustainability and social impact is based on three pillars - Environment, Sourcing and Community - and we are constantly looking for ways to demonstrate leadership in these important areas. Our CORE Values - Care, Ownership, Respect and Excellence - guide all our decision-making and come to life through our Blue Culture. We offer our colleagues progressive careers, comprehensive training, flexibility, and other competitive benefits - these are some of the many reasons why we are one of Canada’s Top Employers, Canada’s Best Diversity Employers, Canada’s Greenest Employers & Canada’s Top Employers for Young People.

If you are unsure whether your experience matches every requirement above, we encourage you to apply anyway. We are looking for varied perspectives which include diverse experiences that we can add to our team.

We have a long-standing focus on diversity, equity and inclusion because we know it will make our company a better place to work and shop. We are committed to creating accessible environments for our colleagues, candidates and customers. Requests for accommodation due to a disability (which may be visible or invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities.

Please Note

Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

Hiring Range / Échelle salariale à l’embauche :$80,000.00 - $110,000.00 / 80.000,00$ - 110.000,00$ (per year / par an)A candidate’s experience and knowledge as well as the geographical region in which the position is located may be factored into the pay a candidate receives for this position. This posting is for an existing vacancy. The Company uses artificial intelligence for the purpose of screening, assessing and/or selecting applicants for this position. / L’expérience et les connaissances d’un candidat ainsi que la région géographique dans laquelle le poste est situé peuvent être prises en compte dans la rémunération qu’un candidat reçoit pour ce poste. Cette offre d’emploi concerne un poste vacant existant. L’entreprise utilise l’intelligence artificielle dans le but de filtrer, d’évaluer et/ou de sélectionner les candidats à ce poste.