WORKDAY SECURITY ANALYST III

Moffitt Cancer Center; Tampa (FL); On-site; USD 90,000 - 120,000; Full time

Job summary

Moffitt Cancer Center is seeking a Security Analyst II to manage Workday security, access controls, and governance. You will support provisioning, audits, and policy enforcement while aligning with regulatory requirements to protect sensitive HR and financial data.

Collaborate with HR, IT, and Internal Audit to assess risks and implement security improvements as Workday expands. This is a long-term, full-time role based in Tampa, FL, with opportunities for career growth within a mission-driven

Qualifications

• Bachelor’s degree in information security, computer science, risk management, or related field.
• Minimum 3 years in IT governance, risk and compliance (GRC).
• Experience configuring, maintaining and auditing Workday security and domains.

Responsibilities

• Provision and deprovision access in Workday and manage security groups.
• Lead audits and readiness activities for internal/external compliance.
• Develop and enforce Workday security governance policies.
• Collaborate with HR, IT, and Internal Audit on security controls.

Skills

Workday security

SailPoint

GRC

SOX

Education

Bachelor’s Degree in Information Security/CS or related field

Tools

Workday

SailPoint

Job description

Working at Moffitt is both a career and a mission: to contribute to the prevention and cure of cancer.As the only National Cancer Institute-designated Comprehensive Cancer Center based in Florida, Moffitt employs some of the best and brightest minds from around the world. Join a dedicated team of nearly 11,000 who are shaping the future we envision. Moffitt has been recognized as a Best and Brightest Company to Work For in the Nation and is continually named one of the Tampa Bay Times’ Top Workplaces.SummaryThe Security Analyst II is responsible for maintaining and supporting the organization's Workday security infrastructure, ensuring secure and efficient access management for all users. This role focuses on day-to-day operational security activities, including user provisioning through Workday and SailPoint, managing security groups, maintaining role-based access controls, domain security policies and business process security policies.The analyst supports the full security life cycle by configuring security in Workday, performing routine audits, responding to security incidents, and maintaining accurate documentation. By ensuring compliance with internal policies and regulatory requirements, the Analyst helps safeguard sensitive HR and financial data while enabling seamless business operations.The analyst supports Workday's infrastructure through governance, sustains continuous policy improvements, and keeps the organization audit-ready. This role will help shape our security framework as we launch Workday and enforce the policies after go-live.This role focuses on developing, maintaining, and monitoring security governance frameworks, including security policies and audit procedures. The analyst partners with HR, IT, and Internal Audit teams to perform regular security audits, document controls, and support internal and external audits. The role also proactively identifies risks, recommends process improvements, and contributes to the overall security strategy, ensuring the Workday environment remains secure, compliant, and well-governed.Please note: This role is not a contract position and offers long-term career growth, benefits, and the opportunity to contribute to the ongoing evolution of the organization’s Workday ecosystem.Responsibilities:Demonstrate proof of security controls during internal and external audits.Provision and deprovision access in Workday.Monitor segragation of dutiesCollaborate with IT and business customers on security-impacting changes.Document change controls for security changes made.Support Workday releases with a focus on security impacts and security regression testing.Drive continuous improvement in security governance processes.Educate business leaders on security policiesContribute to any discussions and decisions concerning enterprise application security.Monitor emerging threats and recommend proactive security enhancements.Proactively stay up to date on Workday releases involving security.Champion security feature adoption where beneficial.Develop and enforce Workday security governance policies.Perform security audits, assessments, and readiness for internal and external compliance requirements.Monitor system activity and ensure policy compliance.Lead audit readiness efforts and maintain documentation.Review security roles and access controls for adherence to policy.Develop and maintain awareness of divisional and data security and comply with policies and procedures.Ensure alignment of security practices with organizational goals and regulatory standards.Credentials and Experience:Bachelor’s Degree: Information Security, Computer Science, Risk Management, or a related fieldMinimum of 3 years of experience in IT governance, risk, and compliance (GRC).Preferred 2 years of experience with Workday security and SailPoint access control.Knowledge of security frameworks and regulatory compliance (e.g., SOX).Experience configuring, maintaining, and auditing Workday security, including domains, business processes, and security groups.Hands-on experience with user provisioning, deprovisioning, and access management in Workday.Experience performing security impact assessments for configuration changes and enhancements.Managing role-based access controls and segration of duties monitoring.Troubleshooting SSO/SAML authentication and access issues.Conducting security reviews, risk assessments, and remediation planning.Experience handling security incidents, escalations, and break/fix support.Partnering with HR, Financials and Supply Chain customers for issue resolution.Experience monitoring integration and EIB access to ensure data security.Building security audit reports and dashboards.Supporting Workday releases, feature adoption, and security regression testing.Documenting change controls, and approvals for security updates.Partnering with stakeholders to prioritize and execute security enhancements.Certification:Workday Security (within 9 months of hire/job change)CISSP (Certified Information System Security) or CISM (Certified Information Security Manager) preferredSalary RangeSalary ranges posted for this position represent the expected base pay range for the role. Actual compensation may vary based on location and a variety of job-related factors, including experience, skills, education, and internal equity among Team Members in similar positions.We are committed to maintaining fair and equitable pay practices and regularly review compensation to ensure alignment across our workforce.Moffitt Career SiteIf you have the vision, passion, and dedication to contribute to our mission,then we have a place for you!1. Equal Employment OpportunityMoffitt Cancer Center is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, or protected veteran or disabled status. We seek candidates whose skills, and personal and professional experience, have prepared them to contribute to our commitment to diversity and excellence.2. Reasonable AccommodationFederal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. Moffitt endeavors to make moffitt.org/careers accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact one of the Human Resources receptionists by phone at 813-745-7899 or by email at [e-mail]. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.Read more information about your EEO rights under the law.Transparency in Coverage Rule