Product Owner

Job Description:

Key Responsibilities

• 1. Workday Security Product Ownership

• Own the overall Workday Security product roadmap, strategy, and governance.

• Define and maintain security principles, standards, and operating procedures.

• Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.

• Act as the primary security SME and escalation point for Workday.

• Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design.

• 2. Workday Security Architecture & Configuration

• Design, configure, and govern:

• Role-Based Security Groups

• User-Based Security Groups

• Domain Security Policies

• Business Process Security Policies

• Segmentation

• Organization-based security

• Constrained/unconstrained security

• Integration System Users and integration security

• Workday reporting security

• Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.

• Ensure appropriate least-privilege access and segregation of duties.

• Conduct security impact assessments for Workday releases and major changes.

• 3. IT Controls / JSOX / Audit

• Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.

• Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.

• Ensure appropriate evidence is produced and retained for audit requirements.

• Partner with Internal Audit, Compliance, Risk, and external auditors.

• Identify security control gaps and drive remediation through to closure.

• Maintain security control documentation, control narratives, RACI and evidence requirements.

• 4. Access Governance

• Establish and govern processes for:

• Joiner/Mover/Leaver access

• Elevated/privileged access

• Temporary access

• Service accounts and ISUs

• Security group ownership

• Periodic access certification

• Monitor inappropriate or excessive access and ensure timely remediation.

• Establish appropriate approval workflows for sensitive Workday access.

• 5. Workday Release & Product Management

• Lead security assessment for Workday biannual releases.

• Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.

• Coordinate security regression testing and validation.

• Ensure security changes are incorporated into release/change management processes.

• Maintain a forward-looking security roadmap aligned with Workday product evolution.

• Required Skills & Experience

• 7+ years of Workday experience, with significant hands-on experience in Workday Security.

• Workday Security certification.

• Strong expertise in:

• Workday HCM

• Workday Security Administration

• Domain Security

• Business Process Security

• Role-Based and User-Based Security Groups

• Integration Security

• Strong understanding of Workday security architecture and security design principles.

• Experience with ITGC, SOX/JSOX, audit and compliance controls.

• Experience leading User Access Reviews / Role-Based Security Reviews.

• Experience working with Internal Audit, external auditors and Information Security teams.

• Strong understanding of RBAC, least privilege, segregation of duties and access governance.

• Experience managing Workday security in a large/global enterprise environment.

• Strong stakeholder management and communication skills.

• Ability to translate business and compliance requirements into practical Workday security solutions.

• Location:

• Bangalore

• Brand:

• Bcoe

• Time Type:

• Full time

• Contract Type:

• Permanent