Lead, Application Consulting - Workday Security

Job description

Who We Are At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The Role Join Kyndryl as an Application Consultant - Workday Security and play a critical role in maintaining the security, integrity, and compliance of our global Workday environment. In this role, you will be responsible for administering Workday security, supporting access management processes, implementing security changes, troubleshooting security issues, and partnering with functional and technical teams to deliver secure solutions across Workday Human Capital Management (HCM), Recruiting, Talent, Learning, Compensation, Time Tracking, Benefits, Payroll, and other Workday modules. As a trusted member of the HR Technology organization, you will collaborate with HR, Compliance, Internal Audit, Product Owners, and Identity Management teams to ensure users have appropriate access based on job responsibilities while maintaining compliance with company policies and security governance requirements. You will support security reviews, segregation-of-duties assessments, audit activities, Workday releases, organizational changes, and transformation initiatives. Through strong analytical and problem-solving skills, you will evaluate business requirements and translate them into secure Workday solutions that balance operational efficiency, data protection, and compliance. The ideal candidate combines Workday security expertise with strong collaboration, attention to detail, and a customer-focused mindset, ensuring secure and effective business operations across the Workday platform. Key Responsibilities: Workday Security AdministrationConfigure, maintain, and support Workday security groups, domain security policies, and business process security policies. Administer role-based, user-based, constrained, and unconstrained security configurations. Implement security changes that support business requirements while maintaining compliance with security standards. Maintain Workday security documentation, role inventories, and configuration records. Support Workday tenant migrations and security-related deployments between environments. Perform security testing and validation activities for new configurations and enhancements. Access Management & ComplianceProcess, analyze, and fulfill Workday access requests in accordance with established governance standards. Conduct periodic access certifications and role reviews to ensure users maintain appropriate access. Validate security assignments following organizational changes, transfers, acquisitions, and restructures. Support internal and external audit activities by providing security documentation, evidence, and access analysis. Assist in identifying and resolving security compliance gaps and control weaknesses. Participate in security reviews and governance activities supporting least-privilege access models. Segregation of Duties (SoD) & Risk ManagementPerform Segregation of Duties (SoD) reviews to identify access conflicts and potential control risks. Partner with Compliance, Risk, and Audit teams to evaluate and remediate security findings. Assist in developing and documenting mitigation plans for identified access risks. Support ongoing monitoring activities to maintain an audit-ready Workday environment. Integration & Reporting SecurityConfigure and support Integration System Users (ISUs), Integration System Security Groups (ISSGs), and related integration security objects. Support security configuration for Enterprise Interface Builder (EIB) integrations and Workday reports. Review report and integration access to ensure sensitive data is appropriately protected. Assist with troubleshooting integration and reporting security issues. Release & Project SupportEvaluate security impacts associated with Workday releases, enhancements, and new functionality. Participate in system testing, user acceptance testing (UAT), and deployment validation activities. Support security requirements associated with Workday projects, acquisitions, and organizational transformations. Collaborate with functional teams to ensure security implications are considered throughout project delivery. Support & Continuous ImprovementInvestigate and resolve Workday security-related incidents and access issues. Analyze root causes of security issues and recommend corrective actions. Partner with stakeholders to understand business requirements and deliver effective security solutions. Identify opportunities to improve security processes, governance controls, and operational efficiency. Contribute to process documentation, knowledge sharing, and continuous improvement initiatives. Kyndryl currently does not require employees to be fully vaccinated against COVID-19, however, if you are hired to work at a client, customer, or partner location, you may be required to show proof of vaccination to align with their respective COVID-19 vaccination policies. Those who believe they are eligible may apply for a medical or religious accommodation prior to the start of employment. Who You Are You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others. Required Skills and Experience:5+ years of Workday Security administration and configuration experience. Experience configuring and supporting: Workday Security Groups Domain Security Policies Business Process Security Policies Role-Based Security User-Based Security Integration Security Experience administering access management processes and security operations within Workday. Knowledge of Workday HCM and related functional areas. Experience supporting audits, compliance activities, or access reviews. Strong analytical, troubleshooting, and problem-solving skills. Ability to gather requirements and translate business needs into security solutions. Strong verbal and written communication skills. Ability to work effectively with cross-functional teams and business stakeholders. Preferred Skills and ExperienceExperience supporting Workday Core HCM, Recruiting, Talent & Performance, Learning, Compensation, Benefits, Time Tracking, or Payroll. Experience configuring and supporting Workday Security Groups, Domain Security Policies, Business Process Security Policies, and Integration Security. Experience supporting user access requests, access reviews, access certifications, and Segregation of Duties (SoD) activities with a focus on security compliance and audit readiness. Experience supporting Workday integrations, EIBs, Integration System Users (ISUs), and Integration System Security Groups (ISSGs). Familiarity with Identity and Access Management (IAM) solutions such as Okta, Entra ID, SailPoint, or similar platforms. Experience supporting audits, compliance reviews, and remediation activities to reduce security risk and strengthen controls. Experience supporting Workday releases, testing, and security impact assessments to ensure secure deployment of new functionality. Demonstrated ability to troubleshoot and resolve security-related issues while maintaining service levels and a positive end-user experience. Workday Security Certification or equivalent Workday Security experience preferred. Pay and Benefits The compensation range for the position in the U.S. is - $92,040 to $174,840 based on a full-time schedule. Your actual compensation may vary depending on your geography, job-related skills and experience. For part-time roles, th