Senior Specialist – Workday Security & Governance

Job DescriptionWe are on the lookout for a Senior Specialist - Workday Security & Governance to join the People Systems team and take ownership of our Workday security landscape, governance, and best practices. Join our 30+ strong People Technology (Workday) team, working across functional, integrations & AI teams to deliver and continuously improve our global Workday landscape. You will collaborate closely with product teams & CoEs owning areas such as Talent Acquisition, Talent, Total Rewards, People Operations Excellence, Data, and other People Technology capabilities. Together, we partner with business and People teams across the organisation to build secure, scalable, and innovative solutions that enable our people and processes globally. Own and continuously improve Workday Security and Governance, ensuring a secure, scalable, compliant, and well-governed environment across modules, countries, and business areas, while driving security standards, governance processes, and best practices. Design, configure, and maintain Workday security, including roles, security groups, domains, business process security, and Intersection Security, applying least-privilege principles and challenging inappropriate access requirements. Conduct periodic security and access reviews, proactively identifying and remediating excessive access, security risks, and control gaps before they become incidents or audit findings. Act as the Workday Security SME for internal and external audits, ensuring controls, documentation, and evidence are audit-ready, while owning security remediation and release impact assessments across security roles, business processes, reporting, and access. Partner with Workday functional, technical, and business teams to design secure, scalable solutions that meet business needs while following best practices and leveraging Workday's out-of-the-box capabilities. Provide security governance and best-practice guidance for Workday integrations, APIs, and service accounts, partnering with the Integrations team on implementation and providing hands-on execution and remediation where required. Build and maintain security reports and dashboards and use Google Apps Script and other automation approaches to simplify reporting, improve visibility into access and risks, and make security insights easier to understand and act on. Drive continuous improvement, innovation, and cross-functional alignment across People Systems, HR, Information Security, Audit, Compliance, and functional teams, translating complex security concepts into practical, scalable solutions for technical and non-technical stakeholders.