Workday Security Lead & Architect

Thecentermemphis; Memphis, Northern (TN, KY); Hybrid; USD 140,000 - 200,000; Full time

Job summary

St. Jude is seeking a senior Workday Security Lead & Architect to own the security architecture and governance for the Workday platform.

You will act as a SME, guiding the overall security model, access controls, and risk management with cross-functional collaboration across IT, Audit, and business stakeholders. The role emphasizes scalable, compliant security configurations and leadership in complex security initiatives, including audits and monitoring.

Qualifications

• 5+ years in security or architecture leadership
• Experience designing and implementing Workday security models
• Strong collaboration with Audit, IS, and functional teams

Responsibilities

• Own the Workday security architecture and configuration model, including domain policies and role-based access
• Lead design and implementation of complex security roles, groups, and access models with least privilege
• Provide architectural review for security changes across Workday areas and integrations
• Own SoD, Privileged/Sensitive Access, and User Activity monitoring strategies
• Drive security governance, documentation, and audit readiness across teams

Skills

Workday security architecture

Security governance

RBAC & least privilege

Risk assessment & audit liaison

Cross-functional leadership

Education

Bachelor's degree in CS or a related field

Tools

Workday

Kainos SmartAudit

Job description

The Workday Security Lead & Architect is a senior technical role responsible for the architecture, governance, and strategic direction of
security across the Workday platform. This position serves as the primary Workday Security subject matter expert, owning the overall security
model and ensuring security solutions are scalable, sustainable, compliant, and aligned with organizational policies and business needs.
The role combines deep hands-on Workday security expertise with architectural and technical leadership, partnering across functional,
technical, Information Security, and Internal Audit teams to manage risk and enable appropriate access. The position provides technical
direction to Workday Security Administrators and Tier 1 Security Support and serves as the escalation point for complex security issues.

This position may be eligible for remote work. However, St. Jude requires all remote employees to:

• Travel to our Memphis campus for the interview process and/or orientation, if selected
• Travel to Memphis to work on-site for one week per quarter, or as requested based on business needs, if hired.

By applying, you acknowledge and agree to these travel requirements as a condition of employment.

This position is remote within approved U.S. locations. Due to state-specific employment regulations, we are unable to consider applicants currently residing in California for remote work; however, candidates based in California who are willing to relocate to an approved location may be considered.

Key Responsibilities:

Security Architecture & Governance:

• Own the overall Workday security architecture and security configuration model, including domain security policies, business process security policies, security groups, role-based access, and constrained security.
• Establish and maintain Workday security architecture standards, design principles, policies, procedures, and technical documentation to support consistent administration, knowledge transfer, and audit readiness.
• Lead the design and implementation of new and complex security roles, security groups, and access models using least privilege and role-based access principles.
• Provide architectural review and consultation for security changes across Workday functional areas, integrations, reporting, and emerging capabilities, ensuring designs are scalable, maintainable, compliant, and aligned with the broader Workday architecture.
• Collaborate with Workday program leadership and senior governance forums as needed to communicate security risks, recommendations, and decisions.

Risk, Audit & Compliance:

• Own the Workday security risk and control strategy, including Segregation of Duties (SoD), Privileged/Sensitive Access (SA), and User Activity monitoring, as well as the design and ongoing effectiveness of preventative and detective controls.
• Provide leadership and subject matter expertise for internal and external audits involving Workday security and access. Partner with Internal Audit, Information Security, functional teams, and other stakeholders to evaluate findings, determine appropriate remediation, and oversee resolution of security-related risks.
• Own the strategy, roadmap, and continued evolution of Kainos SmartAudit and other Workday security monitoring and compliance capabilities.
• Establish standards and oversight for periodic access reviews and security certifications, ensuring appropriate governance, documentation, and remediation. Maintain audit-ready security documentation and evidence supporting organizational control and compliance requirements.
• Ensure security architecture and practices appropriately protect sensitive and regulated data, including PII and PHI.

Security Strategy & Delivery:

• Lead security impact assessments for Workday R1/R2 releases, new capabilities, projects, integrations, and functional changes; identify required security changes, risks, dependencies, and remediation.
• Provide security architecture and design leadership throughout the lifecycle of Workday initiatives, from requirements and solution design through testing and deployment.
• Design, configure, test, and implement complex Workday security solutions across domain and business process security, security groups, intersection security, integration security, and other advanced configurations.
• Lead security-related projects and initiatives, coordinating activities across functional, technical, audit, and Information Security stakeholders.

Technical Leadership & Security Operations:

• Serve as the senior Workday Security