Workday Security Administrator (Remote Available)

Discover Vanderbilt Health : With eight hospitals and over 180 clinics, we are the region’s largest comprehensive academic health system. Vanderbilt Health has a long tradition of providing world-class care to the people of the Mid-South, living out our mission of moving medicine forward through preeminent programs in patient care, education and research. Here you’ll find a spirit of collaboration and a supportive community where your expertise is valued, your knowledge expanded and your uniqueness celebrated. We are committed to fostering an environment where talented, compassionate people are united in bringing the most advanced care to our neighbors throughout the region.

Organization:

VUMC IT ERP Application Support & Security

Job Summary:

The Workday Security Administrator is responsible for the administration, configuration, monitoring, and continuous improvement of security across the Workday platform, supporting Human Resources (HR), Finance, and Supply Chain Management (SCM) workstreams. This role ensures that users, integrations, administrators, and business processes have appropriate access while maintaining least-privilege principles, data confidentiality, regulatory compliance, and organizational security standards.

The Workday Security Administrator partners closely with HR, Finance, Supply Chain Management, Payroll, IT, Internal Audit, Risk, Compliance, and functional Workday teams to design and maintain a scalable and effective Workday security model.

(Note: This role is available for remote work from most US locations.)

.

KEY RESPONSIBILITIES:

Workday Security Administration

• •Administer and maintain the Workday security model across HR, Finance, and SCM functional areas.
• •Configure and manage Domain Security Policies and Business Process Security Policies .
• •Manage Role-Based, User-Based, Job-Based, Integration, Segment-Based, and Intersection Security Groups .
• •Manage segmented security, intersection security, integration security, and proxy access across supported Workday environments.
• •Assign, modify, and revoke Workday security roles and security group memberships based on approved business requirements.
• •Continuously evaluate and optimize security groups, roles, domains, and business process security policies.
• •Maintain appropriate security across Workday tenants and supported HCM, Finance, SCM, Payroll, and related functionality .

Access Management

• •Implement and oversee access-management processes across HR, Finance, and SCM Workday workstreams .
• •Review access requests and determine appropriate security configuration based on business requirements.
• •Ensure access follows least privilege and appropriate segregation-of-duties principles.
• •Perform periodic reviews of privileged, administrative, implementer, integration, and sensitive-data access.
• •Support employee, contingent worker, prior employee, administrator, service-account, procurement, supplier, and other applicable business-user access requirements.
• •Investigate inappropriate, excessive, conflicting, or expired access and coordinate remediation.

Authentication & Identity Security

• •Manage and maintain Workday authentication policies across Workday tenants.
• •Support security configurations associated with SSO, authentication, session management, and identity-management solutions.
• •Troubleshoot authentication and access-related issues.
• •Work with enterprise identity and cybersecurity teams on authentication and security requirements.

Integration Security

• •Create and maintain Integration System Users (ISUs) and Integration System Security Groups (ISSGs) .
• •Configure security permissions required by Workday integrations supporting HR, Finance, SCM, and other enterprise systems .
• •Review integration security to ensure integrations receive only the permissions necessary to perform their intended functions.
• •Troubleshoot integration-security and permission-related issues.
• •Partner with integration teams to identify appropriate domains and security permissions for inbound and outbound integrations.

Security Troubleshooting & Production Support

• •Serve as a Tier 3 escalation point for Workday security and system-support cases across HR, Finance, and SCM .
• •Lead troubleshooting efforts involving security configuration, domain security, business process security, integration security, user access, authentication, and tenant/global configuration.
• •Analyze security-related production incidents and determine root causes.
• •Coordinate remediation with Workday functional, integration, infrastructure, cybersecurity, and business teams.
• •Document resolutions, configuration decisions, and recurring security issues.

Security Auditing & Compliance

• •Develop and execute a comprehensive Workday security audit schedule to maintain appropriate access and data integrity across HR, Finance, and SCM .
• •Conduct periodic reviews of security groups, role assignments, domain permissions, business process permissions, integration access, and privileged access.
• •Support Segregation of Duties (SOD) reviews and remediation, particularly for sensitive Finance and SCM transactions .
• •Evaluate access conflicts across procurement, supplier management, purchasing, receiving, inventory, settlement, accounting, and other applicable business processes.
• •Assist Internal Audit, Risk, Compliance, and external auditors with Workday security evidence and access reviews.
• •Identify security risks, document findings, and coordinate remediation activities.
• •Maintain security configurations and documentation in support of applicable organizational and regulatory requirements.

Security Governance & Change Management

• •Ensure Workday security changes follow established change-management and approval processes.
• •Evaluate security requests for potential downstream impacts across HR, Finance, SCM, integrations, and reporting before implementing changes.
• •Maintain documentation of Workday security architecture, configurations, security groups, policies, and procedures.
• •Develop and maintain security standards, operating procedures, and technical documentation.
• •Translate functional and business security requirements into appropriate technical configurations and documentation.
• •Participate in Workday releases, enhancement projects, tenant updates, and security-impact assessments.

Reporting & Monitoring

• •Develop and maintain Workday security reports used for monitoring, auditing, and access certification.
• •Monitor security configuration changes and administrative activities.
• •Identify anomalous or unauthorized security changes and escalate when necessary.
• •Provide security metrics, audit results, and remediation status to management and stakeholders.

Collaboration & Advisory

• •Partner with HR, Finance, and SCM functional teams to understand business requirements and recommend appropriate security solutions.
• •Provide security guidance across HCM, Payroll, Recruiting, Compensation, Benefits, Timekeeping, Learning, Financial Management, Procurement, Supplier Management, Inventory, Expenses, Reporting, and Integrations .
• •Participate in project design discussions to ensure security requirements are incorporated early in the solution lifecycle.
• •Provide subject-matter expertise regarding Workday security architecture, access controls, SOD, and security best practices.
• •Mentor and provide technical guidance to other analysts and administrators as needed.

Qualifications

• •Strong hands-on experience administering Workday Security , preferably across HR, Finance, and SCM .
• •Strong understanding of Domain Security Policies, Business Process Security Policies, Workday Security Groups, Role-Based Security, User-Based Security, Integration Security, Segmented Security, Intersection Security, Proxy Security, and Authentication Policies .
• •Bachelor's degree - Required
• •Experience creating and maintaining ISUs and ISSGs .
• •Experience troubleshooting complex Workday acces