产品负责人
岗位摘要
Key Responsibilities；Workday Security Product Ownership；Own the overall Workday Security product roadmap, strategy, and governance.
职位说明
Key Responsibilities
Workday Security Product Ownership
Own the overall Workday Security product roadmap, strategy, and governance.
Define and maintain security principles, standards, and operating procedures.
Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.
Act as the primary security SME and escalation point for Workday.
Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.
Workday Security Architecture & Configuration
Design, configure, and govern
Role-Based Security Groups
User-Based Security Groups
Domain Security Policies
Business Process Security Policies
Segmentation
Organization-based security
Constrained/unconstrained security
Integration System Users and integration security
Workday reporting security
Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.
Ensure appropriate least-privilege access and segregation of duties.
Conduct security impact assessments for Workday releases and major changes.
IT Controls / JSOX / Audit
Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.
Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.
Ensure appropriate evidence is produced and retained for audit requirements.
Partner with Internal Audit, Compliance, Risk, and external auditors.
Identify security control gaps and drive remediation through to closure.
Maintain security control documentation, control narratives, RACI and evidence requirements.
Access Governance
Establish and govern processes for
Joiner/Mover/Leaver access
Elevated/privileged access
Temporary access
Service accounts and ISUs
Security group ownership
Periodic access certification
Monitor inappropriate or excessive access and ensure timely remediation.
Establish appropriate approval workflows for sensitive Workday access.
Workday Release & Product Management
Lead security assessment for Workday biannual releases.
Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.
Coordinate security regression testing and validation.
Ensure security changes are incorporated into release/change management processes.
Maintain a forward-looking security roadmap aligned with Workday product evolution.
Required Skills & Experience
7+ years of Workday experience, with significant hands-on experience in Workday Security.
Workday Security certification.
Strong expertise in
Workday HCM
Workday Security Administration
Domain Security
Business Process Security
Role-Based and User-Based Security Groups
Integration Security
Strong understanding of Workday security architecture and security design principles.
Experience with ITGC, SOX/JSOX, audit and compliance controls.
Experience leading User Access Reviews / Role-Based Security Reviews.
Experience working with Internal Audit, external auditors and Information Security teams.
Strong understanding of RBAC, least privilege, segregation of duties and access governance.
Experience managing Workday security in a large/global enterprise environment.
Strong stakeholder management and communication skills.
Ability to translate business and compliance requirements into practical Workday security solutions.
Location
Bangalore
Time Type
Full time
Contract Type
Permanent