Workday Security & Governance Analyst

Kelly; United States; Remote; USD 78,000 - 112,000; Part time

Job summary

Kelly is seeking an experienced Workday Senior Analyst (Contract) to conduct a comprehensive review of our Workday security model with a primary focus on Security Configuration, and Policy Governance. The role will assess effectiveness, identify risks, and deliver recommendations that improve governance, compliance, and operational effectiveness.

The ideal candidate will possess deep expertise in Workday Security and Business Process configuration, with a track record of security audits and

Qualifications

• 7+ years of Workday experience focusing on security administration.
• Experience conducting Workday security audits, tenant reviews, or security optimization initiatives.
• Strong documentation and stakeholder communication skills.
• Knowledge of HR data privacy, compliance, and governance requirements.
• Ability to analyze complex security models and provide actionable recommendations.

Responsibilities

• Perform a comprehensive Workday security assessment including architecture and framework.
• Evaluate security group structure and overall model design.
• Review role-based, user-based, and intersection security assignments.
• Assess governance controls and security administration practices.
• Develop findings, create a security governance roadmap, and present to HRIS leadership.
• Provide knowledge transfer to HR Technology team.

Skills

Security Administration

Workday Security

Governance & Compliance

Stakeholder Communication

Documentation

Job description

Workday Senior Analyst - Security & Governance (Contract - 4 Months)

Title: Workday Security & Governance Senior Analyst

Location: REMOTE

Duration: 4 months

W2 Contract (No C2C)

Pay rate: $68.96 per hour

What the client needs:

• Security groups and role-based, user-based, and intersection security assignments


• Domain security policies and business process security policies


• Segregation of duties (SoD) and access to sensitive data (PII, compensation, performance, benefits)


• A security governance roadmap, risk assessment with prioritized remediation, and knowledge transfer to the HR Technology team

Ideal candidate:

7+ years of Workday experience with a substantial focus on Security Administration, plus a track record of security audits, tenant reviews, or optimization initiatives. Strong documentation and stakeholder communication skills are a must, since they’ll be presenting findings to HRIS leadership.

Position Summary

We are seeking an experienced Workday Senior Analyst (Contract) to perform a comprehensive review of our Workday tenant with a primary focus on Security Configuration, Business Process Security Policies, and Domain Security Policies. This role will assess the effectiveness of our current security framework, identify risks and inefficiencies, and deliver recommendations that improve governance, compliance, scalability, and operational effectiveness.

The ideal candidate will possess deep expertise in Workday Security and Business Process configuration and have experience conducting security audits, tenant assessments, and governance reviews.

Position Overview

The Workday Senior Analyst will lead a comprehensive assessment of the organization's Workday security model and governance framework. The primary objective is to evaluate and optimize:

• Security Groups


• Domain Security Policies


• Business Process Security Policies


• User-Based Security Assignments


• Role-Based Security Assignments


• Segregation of Duties (SoD)


• Access to Sensitive and Confidential Data


• Security Governance and Administration

The consultant will provide recommendations for simplifying security, reducing risk, improving compliance, and establishing a sustainable long-term governance model.

Key Responsibilities

Workday Security Assessment

• Conduct a comprehensive review of Workday security architecture and security framework.


• Evaluate security group structure and overall security model design.


• Assess role-based, user-based, and intersection security assignments.


• Review security administration practices and governance controls.


• Identify redundant, inactive, or unnecessary security groups and roles.


• Evaluate effectiveness of current access approval and provisioning processes.


• Recommend opportunities to simplify and standardize security configurations.

Domain Security Policy Review

• Review all domain security policies and access permissions.


• Assess access to confidential employee, compensation, organizational, and talent data.


• Identify excessive access, conflicting permissions and security gaps.


• Evaluate whether access aligns with business requirements and the principle of least privilege.


• Analyze security inheritance and overlapping permissions.


• Recommend updates to improve security, compliance, and maintainability.


• Document high-risk domains and remediation recommendations.

Business Process Security Policy Review

• Assess security policies across key Workday business processes, including:


• Hire


• Onboarding


• Job Changes


• Promotions


• Compensation Changes


• Transfers


• Terminations


• Benefits Events


• Performance Reviews


• Review initiation, approval, review, and completion security steps.


• Evaluate business process participant configurations and routing logic.


• Analyze delegation, reassignment, and escalation configurations.


• Validate segregation of duties within approval workflows.


• Identify opportunities to streamline approval chains while maintaining compliance.


• Recommend best-practice security configurations for business processes.

Security Risk & Compliance Assessment

• Identify segregation-of-duty conflicts and access control risks.


• Review access to Personally Identifiable Information (PII), compensation, performance, and benefits data.


• Assess compliance with organizational security standards and data governance requirements.


• Analyze privileged access and security administrator roles.


• Deliver a risk assessment with prioritized remediation recommendations.

Documentation & Recommendations

• Develop comprehensive findings and assessment documentation.


• Create a security governance roadmap.


• Prioritize recommendations based on risk, effort, and business impact.


• Present findings and recommendations to HRIS leadership and stakeholders.


• Provide knowledge transfer and best-practice guidance to the HR Technology team.

Required Qualifications

• 7+ years of Workday experience with substantial focus on Security Administration.


• Demonstrated expertise in:


• Domain Security Policies


• Business Process Security Policies


• Security Groups


• Role-Based Security


• User-Based Security


• Segregation of Duties (SoD)


• Security Governance


• Experience conducting Workday security audits, tenant reviews, or security optimization initiatives.


• Strong understanding of Workday business process design and workflow security.


• Ability to analyze complex security models and develop actionable recommendations.


• Excellent documentation, communication, and stakeholder management skills.


• Knowledge of HR data privacy, compliance, and governance requirements.


• Experience creating security governance models and access review frameworks.