Workday Security Administrator (Remote Available)

Job description

Discover Vanderbilt Health : With eight hospitals and over 180 clinics, we are the region’s largest comprehensive academic health system. Vanderbilt Health has a long tradition of providing world-class care to the people of the Mid-South, living out our mission of moving medicine forward through preeminent programs in patient care, education and research. Here you’ll find a spirit of collaboration and a supportive community where your expertise is valued, your knowledge expanded and your uniqueness celebrated. We are committed to fostering an environment where talented, compassionate people are united in bringing the most advanced care to our neighbors throughout the region.
Organization:
VUMC IT ERP Application Support & Security
Job Summary:
The Workday Security Administrator is responsible for the administration, configuration, monitoring, and continuous improvement of security across the Workday platform, supporting Human Resources (HR), Finance, and Supply Chain Management (SCM) workstreams. This role ensures that users, integrations, administrators, and business processes have appropriate access while maintaining least-privilege principles, data confidentiality, regulatory compliance, and organizational security standards.
The Workday Security Administrator partners closely with HR, Finance, Supply Chain Management, Payroll, IT, Internal Audit, Risk, Compliance, and functional Workday teams to design and maintain a scalable and effective Workday security model.
(Note: This role is available for remote work from most US locations.)
KEY RESPONSIBILITIES:
Workday Security Administration
• Administer and maintain the Workday security model across HR, Finance, and SCM functional areas.
• Configure and manage Domain Security Policies and Business Process Security Policies .
• Manage Role-Based, User-Based, Job-Based, Integration, Segment-Based, and Intersection Security Groups .
• Manage segmented security, intersection security, integration security, and proxy access across supported Workday environments.
• Assign, modify, and revoke Workday security roles and security group memberships based on approved business requirements.
• Continuously evaluate and optimize security groups, roles, domains, and business process security policies.
• Maintain appropriate security across Workday tenants and supported HCM, Finance, SCM, Payroll, and related functionality .

Access Management
• Implement and oversee access-management processes across HR, Finance, and SCM Workday workstreams .
• Review access requests and determine appropriate security configuration based on business requirements.
• Ensure access follows least privilege and appropriate segregation-of-duties principles.
• Perform periodic reviews of privileged, administrative, implementer, integration, and sensitive-data access.
• Support employee, contingent worker, prior employee, administrator, service-account, procurement, supplier, and other applicable business-user access requirements.
• Investigate inappropriate, excessive, conflicting, or expired access and coordinate remediation.

Authentication & Identity Security
• Manage and maintain Workday authentication policies across Workday tenants.
• Support security configurations associated with SSO, authentication, session management, and identity-management solutions.
• Troubleshoot authentication and access-related issues.
• Work with enterprise identity and cybersecurity teams on authentication and security requirements.

Integration Security
• Create and maintain Integration System Users (ISUs) and Integration System Security Groups (ISSGs) .
• Configure security permissions required by Workday integrations supporting HR, Finance, SCM, and other enterprise systems .
• Review integration security to ensure integrations receive only the permissions necessary to perform their intended functions.
• Troubleshoot integration-security and permission-related issues.
• Partner with integration teams to identify appropriate domains and security permissions for inbound and outbound integrations.

Security Troubleshooting & Production Support
• Serve as a Tier 3 escalation point for Workday security and system-support cases across HR, Finance, and SCM .
• Lead troubleshooting efforts involving security configuration, domain security, business process security, integration security, user access, authentication, and tenant/global configuration.
• Analyze security-related production incidents and determine root causes.
• Coordinate remediation with Workday functional, integration, infrastructure, cybersecurity, and business teams.
• Document resolutions, configuration decisions, and recurring security issues.

Security Auditing & Compliance
• Develop and execute a comprehensive Workday security audit schedule to maintain appropriate access and data integrity across HR, Finance, and SCM .
• Conduct periodic reviews of security groups, role assignments, domain permissions, business process permissions, integration access, and privileged access.
• Support Segregation of Duties (SOD) reviews and remediation, particularly for sensitive Finance and SCM transactions .
• Evaluate access conflicts across procurement, supplier management, purchasing, receiving, inventory, settlement, accounting, and other applicable business processes.
• Assist Internal Audit, Risk, Compliance, and external auditors with Workday security evidence and access reviews.
• Identify security risks, document findings, and coordinate remediation activities.
• Maintain security configurations and documentation in support of applicable organizational and regulatory requirements.

Security Governance & Change Management
• Ensure Workday security changes follow established change-management and approval processes.
• Evaluate security requests for potential downstream impacts across HR, Finance, SCM, integrations, and reporting before implementing changes.
• Maintain documentation of Workday security architecture, configurations, security groups, policies, and procedures.
• Develop and maintain security standards, operating procedures, and technical documentation.
• Translate functional and business security requirements into appropriate technical configurations and documentation.
• Participate in Workday releases, enhancement projects, tenant updates, and security-impact assessments.

Reporting & Monitoring
• Develop and maintain Workday security reports used for monitoring, auditing, and access certification.
• Monitor security configuration changes and administrative activities.
• Identify anomalous or unauthorized security changes and escalate when necessary.
• Provide security metrics, audit results, and remediation status to management and stakeholders.

Collaboration & Advisory
• Partner with HR, Finance, and SCM functional teams to understand business requirements and recommend appropriate security solutions.
• Provide security guidance across HCM, Payroll, Recruiting, Compensation, Benefits, Timekeeping, Learning, Financial Management, Procurement, Supplier Management, Inventory, Expenses, Reporting, and Integrations .
• Participate in project design discussions to ensure security requirements are incorporated early in the solution lifecycle.
• Provide subject-matter expertise regarding Workday security architecture, access controls, SOD, and security best practices.
• Mentor and provide technical guidance to other analysts and administrators as needed.

Qualifications
• Strong hands-on experience administering Workday Security , preferably across HR, Finance, and SCM .
• Strong understanding of Domain Security Policies, Business Process Security Policies, Workday Security Groups, Role-Based Security, User-Based Security, Integration Security, Segmented Security, Intersection Security, Proxy Security, and Authentication Policies .
• Bachelor's degree - Required
• Experience creating and maintaining ISUs and ISSGs .
• Experience troubleshooting complex Workday access and security issues.
• Knowledge of Workday reporting and security-related reporting.
• Understanding of least privilege, access governance, SOD , audit controls, and security risk management.
• Ability to understand business processes across HR, Finance, and SCM and translate functional requirements into secure Workday configurations.
• Strong documentation, analytical, troubleshooting, and communication skills.
• Ability to collaborate effectively with technical teams, functional teams, business stakeholders, auditors, and management.

Preferred Qualifications
• Workday Security certification or Workday Pro – Security .
• Experience supporting Workday HCM, Finance, Supply Chain Management, Payroll, Expenses, Time Tracking, Recruiting, Compensation, Learning, Reporting, Procurement, Supplier Management, Inventory, and Integrations .
• Experience with enterprise identity-management and SSO technologies.
• Experience supporting internal and external security audits.
• Familiarity with security-monitoring and analytics platforms such as Splunk.
• Experience operating in a large enterprise Workday environment.

TECHNICAL CAPABILITIES
• Business Knowledge (Intermediate): Demonstrates the ability to apply multiple areas of business knowledge to successfully meet broad work objectives. Knowledgeable of the major business units of the company which relate to work responsibilities. Understands and monitors appropriate key business indicators as well as the competition. Able to communicate with users and customers regarding various business functions in an easily understood manner. Able to interpret and draw conclusions from business data. Demonstrates an understanding of overall business perspectives.
• Problem Management (Intermediate): Demonstrates mastery of Incident Tracking and Problem Reporting in practical applications of a difficult nature. Assures that the proper people receive problem reports as soon as detected. Possesses sufficient knowledge, training, and experience to be capable of successfully delivering Incident Tracking and Problem Reporting products and services without requiring support and instruction from others. Able to train and educate by setting the example, giving technical instruction, providing leadership, and generally raising the level of performance of others while on the job.
• Product Knowledge (Intermediate): Possesses sufficient knowledge, training, and experience to be capable of successfully developing or supporting applications for the product without requiring support and instruction from others. Able to educate and train others regarding the process.
• Testing (Intermediate): Possesses a high level of skill to develop new and execute pre-designed program test data, load testing, and ensures validity of data passed among programs. Able to use automated testing aids to help debug programs. Creates and maintains appropriate test documentation for regulatory requirements.
• Technical Analysis (Intermediate): Possesses high level of knowledge of the functionality of assigned products and the systems with which they interface. Proactively identifies, analyzes, and develops solutions to complex clinical, administrative, financial, operational, and technical issues. Possesses sufficient knowledge, training, and experience to be capable to successfully design build, configure, install, run reports, and perform maintenance support with minimal instruction or guidance from others. Participates in optimization efforts. May lead projects and delegate tasks.
• Configuration Management and Planning (Intermediate): Demonstrates a conceptual and business understanding of configuration management, planning and related topics. Able to quickly and accurately discuss the impact of new technology, platforms, and design criteria. Understands and monitors key business indicators as they may apply to enhancements of the system. Able to communicate with users and customers regarding configuration for business functions in an easily understandable manner. Participates or develops multi-faceted configuration plans.

About the Department:
VUMC IT
VUMC IT provides hardware, software and service solutions for the entire Medical Center. With over 40,000 workstations in the Medical Center, our teams can assist not only with hardware support, but also software and application support and services to enhance security and protection of your information.
Position Shift : Days
Our professional administrative functions include critical supporting roles in information technology and informatics, finance, administration, legal and community affairs, human resources, communications and marketing, development, facilities, and many more.
At our growing health system, we support each other and encourage excellence among all who are part of our workforce. High-achieving employees stay at Vanderbilt Health for professional growth, appreciation of benefits, and a sense of community and purpose.
Core Accountabilities:
Organizational Impact: Independently delivers on objectives with understanding of how they impact the results of own area/team and other related teams. Problem Solving/ Complexity of work: Utilizes multiple sources of data to analyze and resolve complex problems; may take a new perspective on existing solution. Breadth of Knowledge: Has advanced knowledge within a professional area and basic knowledge across related areas. Team Interaction: Acts as a "go-to" resource for colleagues with less experience; may lead small project teams.
Core Capabilities :
Supporting Colleagues: - Develops Self and Others: Invests time, energy, and enthusiasm in developing self/others to help improve performance e and gain knowledge in new areas. - Builds and Maintains Relationships: Maintains regular contact with key colleagues and stakeholders using formal and informal opportunities to expand and strengthen relationships. - Communicates Effectively: Recognizes group interactions and modifies one's own communication style to suit different situations and audiences. Delivering Excellent Services: - Serves Others with Compassion: Seeks to understand current and future needs of relevant stakeholders and customizes services to better address them. - Solves Complex Problems: Approaches problems from different angles; Identifies new possibilities to interpret opportunities and develop concrete solutions. - Offers Meaningful Advice and Support: Provides ongoing support and coaching in a constructive manner to increase employees' effectiveness. Ensuring High Quality: - Performs Excellent Work: Engages regularly in formal and informal dialogue about quality; directly addresses quality issues promptly. - Ensures Continuous Improvement: Applies various learning experiences by looking beyond symptoms to uncover underlying causes of problems and identifies ways to resolve them. - Fulfills Safety and Regulatory Requirements: Understands all aspects of providing a safe environment and performs routine safety checks to prevent safety hazards from occurring. Managing Resources Effectively: - Demonstrates Accountability: Demonstrates a sense of ownership, focusing on and driving critical issues to closure. - Stewards Organizational Resources: Applies understanding of the departmental work to effectively manage resources for a department/area. - Makes Data Driven Decisions: Demonstrates strong understanding of the information or data to identify and elevate opportunities. Fostering Innovation: - Generates New Ideas: Proactively identifies new ideas/opportunities from multiple sources or methods to improve processes beyond conventional approaches. - Applies Technology: Demonstrates an enthusiasm for learning new technologies, tools, and procedures to address short-term challenges. - Adapts to Change: Views difficult situations and/or problems as opportunities for improvement; actively embraces change instead of emphasizing negative elements.
Position Qualifications:
Responsibilities:
Certifications:
Work Experience:
Relevant Work Experience
Experience Level:
5 years
Education:
Bachelor's (Required)
This role offers the opportunity to make a meaningful impact within Vanderbilt Health, supported by a comprehensive benefits package which may include health, disability, retirement and/or wellness offerings to enhance your well-being and professional growth.
Vanderbilt Health is committed to fostering an environment where everyone has the chance to thrive and is committed to the principles of equal opportunity. EOE/Vets/Disabled.