Staff Business Systems Analyst – Workday Security & ITGC Lead

Procore Technologies, Inc.; Texas; Remote; USD 115,000 - 158,000; Full time

Benefits offered by this job

Equity Compensation

Bonus Incentive Compensation

Job summary

Procore Technologies, Inc. is seeking a Staff Business Systems Analyst – Workday Security & ITGC Lead. This highly technical role focuses on security architecture, tenant configurations, and reporting infrastructure within Workday, ensuring strict SOX compliance and governance.

You will own and audit security models, service accounts, and critical reporting while driving automated controls and audit readiness across enterprise systems.

Qualifications

• 7+ years in business systems analysis, IT systems administration, or IT compliance with 4+ years configuring Workday.
• Proficiency configuring Workday Security, BP security, ISUs, SoD, and custom reports.
• Hands-on ITGC/ Change management in production environments including provisioning and reviews.
• Experience leading ITGC/ITAC walkthroughs with external audits for public companies.
• Strong understanding of how configurations map to system controls and automated validations.

Responsibilities

• Architect, configure, and maintain Workday security models to align with security/compliance controls.
• Manage and audit Workday integration system users and service accounts; SOX ITGC relevance.
• Design and maintain Workday Key Reports (IPEs) for audit reporting and data integrity.
• Control changes: act as gatekeeper for tenant config changes, feature updates, and new integrations.
• Monitor IT automated controls and batch jobs; ensure timely resolution of failures.

Skills

Workday security

ITGC

Audit reporting

SDLC

Change management

AI/LLM automation

Data governance

Education

Workday Certifications

CISA

CISSP

Bachelor's degree

Tools

Workday

Security governance tools

Audit trail tooling

Job description

We're looking for a Staff Business Systems Analyst - Workday Security & ITGC Lead to join Procore's Enterprise Technology and Business Platforms team. In this hands-on technical role, you will be the system administrator and technical owner responsible for Workday security architecture, tenant configurations, business process engineering, and key reporting infrastructure. You aren't just managing compliance on paper—you know Workday inside and out, build and maintain complex configurations, manage service account governance, and ensure system-level changes and business processes adhere to strict security and SOX standards. Reporting to the Sr. Director, Enterprise G&A Technology, this is a deeply technical, hands-on role embedded directly within Enterprise Technology. This role is based in Remote US and we are looking for someone to join us immediately.

What You'll Do:

• Hands-on Workday Configuration & Security: Architect, configure, and maintain Workday security models (domain policies, business process security, constraint groups, segmented security), ensuring system configurations and business process workflows align directly with security and compliance controls.
• Service Account Governance: Manage and audit all Workday integration system users (ISUs), API service accounts, and elevated access permissions; determine and maintain in-scope service accounts for SOX ITGC and logical access reviews.
• Key Reporting & Data Integrity: Design, build, and maintain the inventory of Workday Key Reports (IPEs) used in financial and operational controls, utilizing advanced custom reports, calculated fields, and robust change-tracking procedures to guarantee data completeness and accuracy.
• Technical Change Management: Act as the technical gatekeeper for Workday tenant configuration changes, semi-annual feature updates, and new integrations, ensuring change management standards, SDLC protocols, and testing evidence are strictly executed prior to production deployment.
• Automated Controls & Job Monitoring: Design, operationalize, and maintain IT Automated Controls (ITACs) and system-enforced validation rules in Workday; monitor critical batch jobs, scheduled processes, integration failures, and ensure documented, timely resolution.
• Audit Leadership & Evidence Technical Lead: Serve as the primary technical liaison for internal and external audits—independently leading walkthroughs, extracting system logs and security reports directly from Workday, and demonstrating how technical configurations prevent risk.
• Deficiency Remediation & Systems Rationalization: Perform technical root-cause analysis for any control failures, design technical fix/remediation plans in Workday, validate compensating controls, and drive automated solutions that eliminate manual compliance overhead.
• AI & Operational Innovation: Apply AI/LLM tooling to streamline systems evidence collection, request triage, and audit documentation while maintaining strict data governance and auditability standards.
• Cross-Functional & Team Mentorship: Partner closely with Enterprise Integrations, HR Technology, Controllership, and Internal Audit, while mentoring Senior and Associate BSAs on Workday configuration standards and compliance execution.

What We're Looking For:

• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years of direct, hands-on experience configuring and administering Workday.
• Deep Workday Technical Expertise: Proven proficiency in configuring Workday Security (domain/BP security policies, ISUs, SoD matrix, security groups) and developing advanced Custom Reports and Calculated Fields for key audit reporting (IPEs).
• Technical ITGC & Change Management Mastery: Practical experience managing ITGC domains in production environments—logical access provisioning, privileged access reviews, service account management, SDLC/change control, and job scheduling.
• Demonstrated experience independently leading ITGC and ITAC technical walkthroughs with external audit teams for public companies or SEC registrants.
• Strong understanding of how business process configurations and tenant settings map to system controls, automated business process validations, and risk mitigation.
• Proven track record of performing exposure analysis, lookback assessments, and technical remediation for system or process deficiencies.
• Experience or practical interest in utilizing AI/LLM automation tools for systems operations, data processing, or compliance workflows.
• Relevant certifications strongly preferred (e.g., Workday Pro Security, Workday Pro Reporting, CISA, CISSP).

Additional Information

• Base Pay Range: 114,912.00 - 158,004.00 USD Annual
• This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation.

Procore is committed to offering competitive, fair, and commensurate compensation. Actual compensation will be based on a candidate's job-related skills, experience, education or training, and location.

For Los Angeles County (unincorporated) Candidates: Procore will consider for employment all qualified applicants, including those with arrest or conviction records, in accordance with the requirements of applicable federal, state, and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act. A criminal history may have a direct, adverse, and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment: 1. appropriately managing, accessing, and handling confidential information including proprietary and trade secret information, as well as accessing Procore's information technology systems and platforms; 2. interacting with and occasionally having unsupervised contact with internal/external customers, stakeholders, and/or colleagues; and 3. exercising sound judgment.