Workday Security Functional Consultant

VirtualResource (VR) is a boutique consultancy supporting companies to optimise their HR and Workday systems. We strive to be the go-to company that partners with businesses to optimise their HR technology landscape.

Our people are our most important asset

• We recognise the need for a committed, skilled and loyal team and strive to create a working environment that is flexible, caring and considerate of all needs.
• We attract the best people and reward them appropriately
• Staff development and upskilling are core to what we do

Job Description

Responsibilities will include:

Security Configuration & Design

• Design, configure, and maintain Workday security groups, domain security policies, and business process security policies.
• Configure role-based security models following the principle of least privilege.
• Establish and manage supervisor, worker, matrix, and custom security roles.
• Create and maintain custom security groups and access frameworks.

User Access Management

• Manage user provisioning, modifications, and deprovisioning activities.
• Support user access requests and security-related troubleshooting.
• Configure and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Participate in periodic user access reviews and certification exercises.

Compliance & Data Privacy

• Ensure Workday security configurations align with organizational security standards and regulatory requirements.
• Support compliance initiatives involving GDPR and other data protection regulations.
• Protect confidential employee, payroll, and financial data through effective security controls.

Security Governance & Risk Management

• Implement and maintain Segregation of Duties (SoD) controls.
• Conduct security reviews, risk assessments, and remediation activities.
• Support audit requirements through documentation, reporting, and evidence gathering.
• Monitor and maintain audit trails, security logs, and access reporting.

Integration & Technical Security

• Manage security requirements for Workday integrations and third-party applications.
• Configure and secure Workday Web Services and API-based integrations.
• Partner with integration teams to ensure secure data exchange practices.

Reporting & Audits

• Develop and maintain security dashboards and audit reports.
• Perform regular security audits and identify areas for improvement.
• Investigate security-related incidents and provide recommendations to prevent recurrence.

Incident Response

• Support investigations related to unauthorized access or security breaches.
• Conduct root cause analysis and implement corrective actions.
• Collaborate with internal stakeholders to ensure timely resolution of security incidents.

Must-Have Skills & Experience

• Proven experience as a Workday Security Consultant , Workday Security Administrator, or Workday Security Lead.
• Strong understanding of: Workday Security Groups Domain Security Policies Business Process Security Policies User-Based Security Role-Based Security Segregation of Duties (SoD)
• Experience configuring and maintaining Workday security across one or more modules: HCM Recruiting Payroll Time Tracking Absence Compensation Finance
• Experience supporting security audits, compliance reviews, and access governance initiatives.
• Strong stakeholder management and communication skills.
• Ability to work independently and manage multiple priorities.

Other Qualifications / Skills That Will Be Beneficial (Not Mandatory)

• Workday Security Certification.
• Experience with Workday Extend security.
• Experience securing Workday integrations and APIs.
• Knowledge of Single Sign-On technologies (Okta, Azure AD, Entra ID).
• Experience with Workday Prism Analytics.
• Experience supporting global Workday environments.
• Understanding of GDPR, SOX, HIPAA, or other regulatory frameworks.
• Workday Reporting and Calculated Fields experience.
• Exposure to Workday Financials security.
• Experience participating in Workday implementation or transformation projects.

What We're Looking For

We're looking for someone who is:

• Detail-oriented and passionate about security.
• Able to assess risk and recommend practical solutions.
• Comfortable working directly with clients and stakeholders.
• Collaborative, proactive, and solution-focused.
• Committed to maintaining high standards of data privacy and governance