Workday Security Senior Manager

• Design, configure, and maintain scalable Workday security architecture, including role-based, user-based, and intersection security groups.
• Define and enforce governance standards for Workday security configuration and ongoing maintenance.
• Continuously evaluate and optimize security models to align with organizational and regulatory requirements.

• Manage and administer domain security policies, business process security policies, and proxy access.
• Implement and maintain segmented and least-privilege access models across Workday modules.
• Ensure role assignments are aligned with job responsibilities and organizational hierarchy.

• Partner with GRC, Legal, and Audit teams to ensure adherence to regulatory frameworks (e.g., SOX, GDPR).
• Lead and execute User Access Reviews (UARs), ensuring timely remediation of identified issues.
• Support internal and external audits by providing documentation, audit evidence, and remediation plans.
• Implement and maintain Segregation of Duties (SoD) controls and monitoring processes.

• Configure and review security for inbound and outbound Workday integrations.
• Ensure secure authentication and authorization mechanisms for integrations (e.g., API users, ISUs, certificates).
• Partner with integration teams to enforce secure data exchange standards.

• Investigate, troubleshoot, and resolve Workday security-related incidents and access issues.
• Document root causes, remediation steps, and preventive controls.
• Drive continuous improvement of security processes and incident response practices.

• Collaborate with HR, Payroll, Finance, and IT teams to gather security and reporting requirements.
• Build and support Workday security reports and dashboards.
• Provide guidance on least-privilege access design and security best practices.
• Act as a trusted advisor for security-related decisions and escalations.

• Bachelor’s degree in computer science, Information Security, or a related field.
• 8+ years of hands-on experience in Workday security design and configuration.
• Strong understanding of Workday security frameworks, including:
  • Security groups
  • Domain and business process policies
  • Calculated fields and security reporting
• Proven experience working with SOX controls and Segregation of Duties (SoD) frameworks.
• Familiarity with global data privacy regulations such as GDPR.
• Workday Pro Certification (Security).

• Experience supporting multiple Workday modules in a global enterprise environment.
• Prior involvement in audit cycles and compliance programs.
• Knowledge of integration security and identity/access management concepts.
• Experience in life sciences, healthcare, or other regulated industries.
• Prior participation in post‑implementation stabilization, optimization, or audit remediation.
• Familiarity with identity governance, access recertification, or data governance frameworks.

• Security & Compliance Mindset – Prioritizes data protection and regulatory adherence.
• Collaboration – Builds strong partnerships across technical and business teams.
• Analytical Thinking – Solves complex access and security challenges effectively.
• Ownership – Drives accountability for secure and compliant system operations.
• Communication – Clearly articulates security concepts to diverse audiences.

• Work is performed in an office environment with exposure to electrical office equipment.
• Occasional drives to site locations with occasional travel both domestic and international.
• Frequently stationary for 6-8 hours per day.
• Repetitive hand movement of both hands with the ability to make fast, simple, repeated movements of the fingers, hands, and wrists.
• Occasional crouching, stooping, with frequent bending and twisting of upper body and neck.
• Ability to access and use a variety of computer software developed both in-house and off-the-shelf.
• Light to moderate lifting and carrying, or moving of objects, including luggage and laptop computer with a maximum lift of 15-20 lbs.
• Regular and consistent attendance.
• Varied hours may be required.

This role plays a critical part in safeguarding enterprise data by ensuring secure, compliant, and efficient access to Fortrea Workday systems, enabling business operations while minimizing risk.

Learn more about our EEO & Accommodations request here.