Senior Analyst, Workday Security & Access Governance

Loblaw Companies Limited•Brampton, ON

24d•CA$80,000 - CA$110,000

About The Position

Loblaw Companies Limited is seeking a Senior Analyst, Workday Security & Access Governance to support the configuration, administration, and ongoing governance of Workday security across production and non-production environments. This role involves being a hands-on Workday Security specialist responsible for configuring and maintaining authentication, security groups, role-based access, Domain Security Policies, Business Process Security Policies, and other security controls within Workday. The analyst will collaborate with various departments including Human Resources, Finance, Technology, Cybersecurity, Identity and Access Management, Audit, and enterprise project teams to implement secure, scalable, and well-controlled Workday solutions.

Requirements

Strong hands-on experience configuring and administering Workday Security in a large or complex enterprise environment.
Strong knowledge of Workday’s configurable security framework, including security groups, role assignments, Domain Security Policies, Business Process Security Policies, user-based security, role-based security, and constrained security groups.
Experience analyzing, configuring, testing, and troubleshooting Workday security across functional areas such as HCM, Payroll, Finance, Recruiting, Compensation, Benefits, or other Workday modules.
Experience with Workday authentication and access controls, including an understanding of enterprise identity-management concepts such as Single Sign-On, multi-factor authentication, identity lifecycle management, and role-based access control.
Experience performing access reviews, privileged-access reviews, segregation-of-duties analysis, security assessments, and access remediation.
Experience creating and using Workday reports to analyze security assignments, access permissions, security groups, and control effectiveness.
Experience supporting Workday projects, enhancements, tenant changes, and releases, including security requirements analysis, configuration, testing, deployment, and post-production validation.
Strong troubleshooting and analytical skills, with the ability to diagnose complex security and access issues across Workday business processes, domains, roles, and security groups.
Understanding of security, privacy, access-control, audit, and compliance principles within an enterprise technology environment.
Strong documentation skills and the ability to clearly explain Workday security configurations, access decisions, risks, and remediation requirements to technical and non-technical partners.
Ability to work independently on complex security assignments while collaborating effectively with Workday functional teams, Identity and Access Management, Cybersecurity, Technology, Audit, and business stakeholders.

Nice To Haves

Workday Pro Security, Workday Platform Administrator, or another relevant Workday certification.
Experience using Kainos Smart Test and Kainos Smart Audit for Workday security testing, controls monitoring, regression testing, or audit support.
Experience with Workday security supporting multiple functional areas or large-scale Workday implementations.
Experience working with Identity and Access Management platforms and processes, including joiner, mover, and leaver access lifecycle activities.
Experience supporting Workday in a regulated, controls-focused, or audit-intensive enterprise environment.
Knowledge of security-control frameworks, privacy requirements, segregation-of-duties principles, and enterprise access-governance practices.
Relevant experience may have been gained through enterprise operations, Workday implementations, consulting, application support, or comparable technical roles.

Responsibilities

Configure, maintain, and troubleshoot Workday security, including security groups, role assignments, Domain Security Policies, Business Process Security Policies, user-based and role-based access, and privileged access.
Analyze Workday security requirements and translate business, technical, risk, and compliance requirements into appropriate Workday security configurations.
Support the design and implementation of security changes for Workday projects, enhancements, integrations, business process changes, and platform releases.
Perform security impact assessments for proposed Workday configuration changes and identify potential access, segregation-of-duties, or control implications.
Configure and maintain Workday authentication and access-related settings in coordination with Identity and Access Management and Cybersecurity teams.
Investigate and resolve complex Workday access and security issues, including inappropriate access, missing permissions, role-assignment issues, security policy conflicts, and authentication-related problems.
Support Workday access governance activities, including access reviews, privileged-access reviews, security-group assessments, role validation, segregation-of-duties analysis, and remediation of identified access risks.
Develop and maintain Workday security reports and other reporting used to monitor access, support controls, investigate security issues, and provide audit evidence.
Support production and non-production tenant security administration, including tenant access, environment refresh activities, security validation, test-user access, and post-refresh security remediation.
Execute security testing for Workday configuration changes, releases, projects, and remediation activities, including development of test scenarios, validation of expected access, and documentation of test results.
Participate in Workday release activities by assessing security-related changes, testing applicable functionality, and implementing required configuration updates.
Maintain accurate documentation of Workday security configurations, security groups, role assignments, controls, procedures, design decisions, and operational processes.
Support internal and external audits by producing security configuration evidence, access reports, control documentation, and responses to audit inquiries.
Identify opportunities to improve Workday security configuration, access-governance processes, monitoring, reporting, and automation.
Apply established change-management, security, risk, and governance standards when implementing changes within Workday environments.