Senior Analyst, Workday Security & Access Governance

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued - as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

We are seeking a
Senior Analyst, Workday Security & Access Governance
to support the configuration, administration, and ongoing governance of Workday security across production and non-production environments.

In this role, you will be a hands-on Workday Security specialist responsible for configuring and maintaining authentication, security groups, role-based access, Domain Security Policies, Business Process Security Policies, and other security controls within Workday. You will partner with Human Resources, Finance, Technology, Cybersecurity, Identity and Access Management, Audit, and enterprise project teams to implement secure, scalable, and well-controlled Workday solutions.

• Configure, maintain, and troubleshoot Workday security, including security groups, role assignments, Domain Security Policies, Business Process Security Policies, user-based and role-based access, and privileged access.
• Analyze Workday security requirements and translate business, technical, risk, and compliance requirements into appropriate Workday security configurations.
• Support the design and implementation of security changes for Workday projects, enhancements, integrations, business process changes, and platform releases.
• Perform security impact assessments for proposed Workday configuration changes and identify potential access, segregation-of-duties, or control implications.
• Configure and maintain Workday authentication and access-related settings in coordination with Identity and Access Management and Cybersecurity teams.
• Investigate and resolve complex Workday access and security issues, including inappropriate access, missing permissions, role-assignment issues, security policy conflicts, and authentication-related problems.
• Support Workday access governance activities, including access reviews, privileged-access reviews, security-group assessments, role validation, segregation-of-duties analysis, and remediation of identified access risks.
• Develop and maintain Workday security reports and other reporting used to monitor access, support controls, investigate security issues, and provide audit evidence.
• Support production and non-production tenant security administration, including tenant access, environment refresh activities, security validation, test-user access, and post-refresh security remediation.
• Execute security testing for Workday configuration changes, releases, projects, and remediation activities, including development of test scenarios, validation of expected access, and documentation of test results.
• Participate in Workday release activities by assessing security-related changes, testing applicable functionality, and implementing required configuration updates.
• Maintain accurate documentation of Workday security configurations, security groups, role assignments, controls, procedures, design decisions, and operational processes.
• Support internal and external audits by producing security configuration evidence, access reports, control documentation, and responses to audit inquiries.
• Identify opportunities to improve Workday security…