Workday Security Lead – SOX Compliance & Security Communications

Introduction:

This position is for a Workday Security Lead with expertise in SOX Compliance, Security Governance, and Security Communications within a Healthcare environment. The ideal candidate will be responsible for leading Workday security administration, ensuring compliance with SOX and HIPAA requirements, managing security audits, and serving as the primary liaison between IT, Internal Audit, Compliance, HR, Payroll, and business stakeholders.

Responsibilities:

• Lead Workday Security administration, including Security Groups, Domain Security Policies, Business Process Security, and Role-Based Access.
• Drive SOX compliance, Segregation of Duties (SoD), access reviews, audit readiness, and security control documentation.
• Partner with Internal Audit, Compliance, HR, Payroll, Finance, and IT Security to communicate security changes, manage audit requests, and ensure governance standards.
• Conduct periodic security reviews, access certifications, and remediation of audit findings.
• Support Workday releases by assessing security impacts and maintaining compliance.
• Ensure Workday security aligns with HIPAA, organizational policies, and healthcare regulatory requirements.

Requirements:

Required Qualifications:

• 8+ years of Workday Security experience with enterprise implementations.
• Strong hands-on experience with SOX Compliance, Security Governance, Audit Support, and Security Communications.
• Experience in Healthcare organizations is required.
• Expertise in Workday Security configuration, access management, and Segregation of Duties (SoD).
• Excellent stakeholder communication and cross-functional collaboration skills.

Preferred Skills:

• Workday Security Certification
• HIPAA Compliance
• Internal & External Audit Support
• Identity & Access Management (IAM)
• SSO/Azure AD/Okta
• Strong documentation, governance, and executive communication skills