Staff Business Systems Analyst – Workday Security & ITGC Lead

Procore Technologies; Austin (TX); On-site; USD 128,000 - 176,000; Full time

Job summary

Procore Technologies seeks a Staff Business Systems Analyst – Workday Security & ITGC Lead to own Workday security architecture, tenant configurations, and reporting infrastructure within the Enterprise Technology and Business Platforms team. Based in Austin, TX, this hands-on role reports to the Sr.

Director, Enterprise G&A Technology and is available for immediate start. You will architect secure Workday setups, govern service accounts, lead ITGC/ITAC walkthroughs with audits, and mentor BSAs

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, MIS, Accounting, or equivalent practical experience.
• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years directly configuring and administering Workday.
• Deep Workday technical expertise configuring Workday Security and advanced reporting for audit needs.
• Practical ITGC & Change Management mastery across production environments including provisioning and reviews.
• Experience leading ITGC/ITAC walkthroughs with external audits for public companies or SEC registrants.
• Understanding of how configurations map to controls, automated validations, and risk mitigation.
• Experience or interest in using AI/LLM tools for systems operations, data processing, or compliance workflows.
• Certs such as Workday Pro Security/Reporting, CISA, CISSP preferred.

Responsibilities

• Hands-on Workday configuration and security architecture to align with security/compliance controls.
• Manage and audit Workday integration system users and elevated access for SOX ITGC.
• Design and maintain Workday reports and data integrity controls for audits.
• Act as technical gatekeeper for tenant changes, feature updates, and new integrations.
• Design and maintain IT Automated Controls and monitor batch jobs and integrations.
• Lead audits technically, extract logs and security reports from Workday.
• Root-cause analysis and remediation plans for control failures.
• Apply AI/LLM tooling to streamline evidence collection and audit documentation.
• Mentor BSAs on Workday configuration standards and compliance execution.

Skills

Workday Security

ITGC

SOX Compliance

Audit Reporting

Data Governance

Education

Bachelor's degree in IT / CS / MIS / Accounting

Job description

We’re looking for a Staff Business Systems Analyst – Workday Security & ITGC Lead to join Procore’s Enterprise Technology and Business Platforms team. In this hands‑on technical role, you will be the system administrator and technical owner responsible for Workday security architecture, tenant configurations, business process engineering, and key reporting infrastructure. You aren’t just managing compliance on paper—you know Workday inside and out, build and maintain complex configurations, manage service account governance, and ensure system‑level changes and business processes adhere to strict security and SOX standards.

Reporting to the Sr. Director, Enterprise G&A Technology, this is a deeply technical, hands‑on role embedded directly within Enterprise Technology. This role is based in Austin, Texas and we are looking for someone to join us immediately.

What You’ll Do:

• Hands‑on Workday Configuration & Security: Architect, configure, and maintain Workday security models (domain policies, business process security, constraint groups, segmented security), ensuring system configurations and business process workflows align directly with security and compliance controls.

• Service Account Governance: Manage and audit all Workday integration system users (ISUs), API service accounts, and elevated access permissions; determine and maintain in‑scope service accounts for SOX ITGC and logical access reviews.

• Key Reporting & Data Integrity: Design, build, and maintain the inventory of Workday Key Reports (IPEs) used in financial and operational controls, utilizing advanced custom reports, calculated fields, and robust change‑tracking procedures to guarantee data completeness and accuracy.

• Technical Change Management: Act as the technical gatekeeper for Workday tenant configuration changes, semi‑annual feature updates, and new integrations, ensuring change management standards, SDLC protocols, and testing evidence are strictly executed prior to production deployment.

• Automated Controls & Job Monitoring: Design, operationalize, and maintain IT Automated Controls (ITACs) and system‑enforced validation rules in Workday; monitor critical batch jobs, scheduled processes, integration failures, and ensure documented, timely resolution.

• Audit Leadership & Evidence Technical Lead: Serve as the primary technical liaison for internal and external audits—independently leading walkthroughs, extracting system logs and security reports directly from Workday, and demonstrating how technical configurations prevent risk.

• Deficiency Remediation & Systems Rationalization: Perform technical root‑cause analysis for any control failures, design technical fix/remediation plans in Workday, validate compensating controls, and drive automated solutions that eliminate manual compliance overhead.

• AI & Operational Innovation: Apply AI/LLM tooling to streamline systems evidence collection, request triage, and audit documentation while maintaining strict data governance and auditability standards.

• Cross‑Functional & Team Mentorship: Partner closely with Enterprise Integrations, HR Technology, Controllership, and Internal Audit, while mentoring Senior and Associate BSAs on Workday configuration standards and compliance execution.

What We’re Looking For:

• Bachelor’s degree in Information Technology, Computer Science, Management Information Systems, Accounting, or equivalent practical experience.

• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years of direct, hands‑on experience configuring and administering Workday.

• Deep Workday Technical Expertise: Proven proficiency in configuring Workday Security (domain/BP security policies, ISUs, SoD matrix, security groups) and developing advanced Custom Reports and Calculated Fields for key audit reporting (IPEs).

• Technical ITGC & Change Management Mastery: Practical experience managing ITGC domains in production environments—logical access provisioning, privileged access reviews, service account management, SDLC/change control, and job scheduling.

• Demonstrated experience independently leading ITGC and ITAC technical walkthroughs with external audit teams for public companies or SEC registrants.

• Strong understanding of how business process configurations and tenant settings map to system controls, automated business process validations, and risk mitigation.

• Proven track record of performing exposure analysis, lookback assessments, and technical remediation for system or process deficiencies.

• Experience or practical interest in utilizing AI/LLM automation tools for systems operations, data processing, or compliance workflows.

• Relevant certifications strongly preferred (e.g., Workday Pro Security, Workday Pro Reporting, CISA, CISSP).

Additional Information

Base Pay Range:

127,680.00 - 175,560.00 USD Annual

This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation. Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate’s job‑related skills, experience, education or training, and location.

For Los Angeles County (unincorporated) Candidates:

Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act.

A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore’s information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.