Product Owner

Job Description: Key Responsibilities 1.

Workday Security Product Ownership Own the overall Workday Security product roadmap, strategy, and governance.

Define and maintain security principles, standards, and operating procedures.

Prioritize security enhancements, remediation activities, and technical debt within the Workday backlog.

Act as the primary security SME and escalation point for Workday.

Partner with Product Owners and functional teams to ensure security is embedded into Workday solution design. 2.

Workday Security Architecture & Configuration Design, configure, and govern: Role-Based Security Groups User-Based Security Groups Domain Security Policies Business Process Security Policies Segmentation Organization-based security Constrained/unconstrained security Integration System Users and integration security Workday reporting security Review and approve security changes associated with new Workday functionality, integrations, reports, and business processes.

Ensure appropriate least-privilege access and segregation of duties.

Conduct security impact assessments for Workday releases and major changes. 3.

IT Controls / JSOX / Audit Own Workday security controls supporting ITGC, JSOX/SOX and internal/external audits.

Coordinate periodic User Access Reviews (UAR) and Role-Based Security Reviews.

Ensure appropriate evidence is produced and retained for audit requirements.

Partner with Internal Audit, Compliance, Risk, and external auditors.

Identify security control gaps and drive remediation through to closure.

Maintain security control documentation, control narratives, RACI and evidence requirements. 4.

Access Governance Establish and govern processes for: Joiner/Mover/Leaver access Elevated/privileged access Temporary access Service accounts and ISUs Security group ownership Periodic access certification Monitor inappropriate or excessive access and ensure timely remediation.

Establish appropriate approval workflows for sensitive Workday access. 5.

Workday Release & Product Management Lead security assessment for Workday biannual releases.

Review new security features, changes to existing security functionality, and Workday-delivered security enhancements.

Coordinate security regression testing and validation.

Ensure security changes are incorporated into release/change management processes.

Maintain a forward-looking security roadmap aligned with Workday product evolution.

Required Skills & Experience 7+ years of Workday experience, with significant hands-on experience in Workday Security.

Workday Security certification.

Strong expertise in: Workday HCM Workday Security Administration Domain Security Business Process Security Role-Based and User-Based Security Groups Integration Security Strong understanding of Workday security architecture and security design principles.

Experience with ITGC, SOX/JSOX, audit and compliance controls.

Experience leading User Access Reviews / Role-Based Security Reviews.

Experience working with Internal Audit, external auditors and Information Security teams.

Strong understanding of RBAC, least privilege, segregation of duties and access governance.

Experience managing Workday security in a large/global enterprise environment.

Strong stakeholder management and communication skills.

Ability to translate business and compliance requirements into practical Workday security solutions.

Location: Bangalore Brand: Bcoe Time Type: Full time Contract Type: Permanent