Workday Security & Governance Analyst

Workday Senior Analyst - Security & Governance (Contract - 4 Months)

Title: Workday Security & Governance Senior Analyst

Location: REMOTE

Duration: 4 months

W2 Contract (No C2C)

Pay rate: $68.96 per hour

• Security groups and role-based, user-based, and intersection security assignments
• Domain security policies and business process security policies
• Segregation of duties (SoD) and access to sensitive data (PII, compensation, performance, benefits)
• A security governance roadmap, risk assessment with prioritized remediation, and knowledge transfer to the HR Technology team

7+ years of Workday experience with a substantial focus on Security Administration, plus a track record of security audits, tenant reviews, or optimization initiatives. Strong documentation and stakeholder communication skills are a must, since they’ll be presenting findings to HRIS leadership.

We are seeking an experienced Workday Senior Analyst (Contract) to perform a comprehensive review of our Workday tenant with a primary focus on Security Configuration, Business Process Security Policies, and Domain Security Policies
. This role will assess the effectiveness of our current security framework, identify risks and inefficiencies, and deliver recommendations that improve governance, compliance, scalability, and operational effectiveness.

The ideal candidate will possess deep expertise in Workday Security and Business Process configuration and have experience conducting security audits, tenant assessments, and governance reviews.

The Workday Senior Analyst will lead a comprehensive assessment of the organization's Workday security model and governance framework. The primary objective is to evaluate and optimize:

• Security Groups
• Domain Security Policies
• Business Process Security Policies
• User-Based Security Assignments
• Role-Based Security Assignments
• Segregation of Duties (SoD)
• Access to Sensitive and Confidential Data
• Security Governance and Administration

The consultant will provide recommendations for simplifying security, reducing risk, improving compliance, and establishing a sustainable long-term governance model.

• Conduct a comprehensive review of Workday security architecture and security framework.
• Evaluate security group structure and overall security model design.
• Assess role-based, user-based, and intersection security assignments.
• Review security administration practices and governance controls.
• Identify redundant, inactive, or unnecessary security groups and roles.
• Evaluate effectiveness of current access approval and provisioning processes.
• Recommend opportunities to simplify and standardize security configurations.

• Review all domain security policies and access permissions.
• Assess access to confidential employee, compensation, organizational, and talent data.
• Identify excessive access, conflicting permissions and security gaps.
• Evaluate whether access aligns with business requirements and the principle of least privilege.
• Analyze security inheritance and overlapping permissions.
• Recommend updates to improve security, compliance, and maintainability.
• Document high-risk domains and remediation recommendations.

• Assess security policies across key Workday business processes, including:
• Hire
• Onboarding
• Job Changes
• Promotions
• Compensation Changes
• Transfers
• Terminations
• Benefits Events
• Performance Reviews
• Review initiation, approval, review, and completion security steps.
• Evaluate business process participant configurations and routing logic.
• Analyze delegation, reassignment, and escalation configurations.
• Validate segregation of duties within approval workflows.
• Identify…