Workday Security Functional Consultant

VirtualResource (VR) is a boutique consultancy supporting companies to optimise their HR and Workday systems. We strive to be the go-to company that partners with businesses to optimise their HR technology landscape.

Our people are our most important asset

• We recognise the need for a committed, skilled and loyal team and strive to create a working environment that is flexible, caring and considerate of all needs.
• We attract the best people and reward them appropriately
• Staff development and upskilling are core to what we do

We are looking for an experienced Workday Security Functional Consultant to join our growing Workday Practice. This role is responsible for designing, implementing, and maintaining secure, compliant, and scalable security configurations across the Workday platform. You will work closely with business stakeholders, HR, Finance, Payroll, IT, and project teams to ensure appropriate access controls, segregation of duties, data privacy compliance, and security governance are embedded across the Workday ecosystem. This is an excellent opportunity for a Workday Security specialist who enjoys solving complex security challenges while helping organizations maximize the value of their Workday investment.

Job Description

Responsibilities will include:

Security Configuration & Design

• Design, configure, and maintain Workday security groups, domain security policies, and business process security policies.
• Configure role-based security models following the principle of least privilege.
• Establish and manage supervisor, worker, matrix, and custom security roles.
• Create and maintain custom security groups and access frameworks.

User Access Management

• Manage user provisioning, modifications, and deprovisioning activities.
• Support user access requests and security-related troubleshooting.
• Configure and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Participate in periodic user access reviews and certification exercises.

Compliance & Data Privacy

• Ensure Workday security configurations align with organizational security standards and regulatory requirements.
• Support compliance initiatives involving GDPR and other data protection regulations.
• Protect confidential employee, payroll, and financial data through effective security controls.

Security Governance & Risk Management

• Implement and maintain Segregation of Duties (SoD) controls.
• Conduct security reviews, risk assessments, and remediation activities.
• Support audit requirements through documentation, reporting, and evidence gathering.
• Monitor and maintain audit trails, security logs, and access reporting.

Integration & Technical Security

• Manage security requirements for Workday integrations and third-party applications.
• Configure and secure Workday Web Services and API-based integrations.
• Partner with integration teams to ensure secure data exchange practices.

Reporting & Audits

• Develop and maintain security dashboards and audit reports.
• Perform regular security audits and identify areas for improvement.
• Investigate security-related incidents and provide recommendations to prevent recurrence.

Incident Response

• Support investigations related to unauthorized access or security breaches.
• Conduct root cause analysis and implement corrective actions.
• Collaborate with internal stakeholders to ensure timely resolution of security incidents.

Must-Have Skills & Experience

• Proven experience as a Workday Security Consultant , Workday Security Administrator, or Workday Security Lead.
• Strong understanding of: Workday Security Groups Domain Security Policies Business Process Security Policies User-Based Security Role-Based Security Segregation of Duties (SoD)
• Experience configuring and maintaining Workday security across one or more modules: HCM Recruiting Payroll Time Tracking Absence Compensation Finance
• Experience supporting security audits, compliance reviews, and access governance initiatives.
• Strong stakeholder management and communication skills.
• Ability to work independently and manage multiple priorities.

Other Qualifications / Skills That Will Be Beneficial (Not Mandatory)

• Workday Security Certification.
• Experience with Workday Extend security.
• Experience securing Workday integrations and APIs.
• Knowledge of Single Sign-On technologies (Okta, Azure AD, Entra ID).
• Experience with Workday Prism Analytics.
• Experience supporting global Workday environments.
• Understanding of GDPR, SOX, HIPAA, or other regulatory frameworks.
• Workday Reporting and Calculated Fields experience.
• Exposure to Workday Financials security.
• Experience participating in Workday implementation or transformation projects.

What We're Looking For

We're looking for someone who is:

• Detail-oriented and passionate about security.
• Able to assess risk and recommend practical solutions.
• Comfortable working directly with clients and stakeholders.
• Collaborative, proactive, and solution-focused.
• Committed to maintaining high standards of data privacy and governance