Business System Analyst - Workday Security

Introduction

At IBM Finance & Operations, we are the backbone of IBM’s transformation driving efficiency, transparency, and smart decision-making across the business. Our teams provide the insight and discipline that guide strategy, ensure financial strength, and enable IBM to invest in innovation and growth. Working in Finance & Operations means combining analytical skills with collaboration and curiosity. You’ll partner with colleagues across functions and geographies, using data, technology, and process excellence to create solutions that improve performance and deliver measurable impact.

IBM offers continuous learning, career development, and a culture that values diverse perspectives. Join us and be part of a global team that keeps IBM moving forward, while building your own future in a dynamic and evolving environment.

Job Description

Summary:

The Senior Business Systems Analyst exercises good judgment and is responsible for working with minimal instruction while making sound decisions to resolve moderately complex technical and business system issues. This role collaborates with stakeholders to design and implement solutions that support the organization's business objectives. The role analyzes data trends and develops insights that inform business decisions, improving the efficiency and sustainability of systems.

Job Description:

Red Hash is looking for a Senior Business Systems Analyst to join the Workforce Technology Solutions team. This role collaborates with stakeholders to design and implement solutions that support the organization's business objectives. The core focus of this position is Workday platform security while ensuring adherence to all required audit protocols and controls.

Workday Security Architecture:
Expert-level configuration of Workday security frameworks, including Role-Based (RBST), User-Based, Intersection, and Segment-Based Security Groups.

Governance & Compliance:
Deep understanding of Domain Security Policies (DSP) and Business Process Security Policies (BPSP); experience managing Segregation of Duties (SoD) and ensuring "least privilege" access models.

Audit Readiness & Analysis:
Proven ability to lead internal and external security audits, utilizing Workday Auditor tools, View History, and Security Monitor to provide evidence and ensure platform integrity.

Secure Workflow Design:
Strong ability to analyze HR operational workflows and translate them into secure Workday Business Processes, ensuring appropriate approval chains and step-level security are embedded.

Advanced Audit Reporting:
Experience building complex Advanced, Matrix, and Composite reports specifically for auditing (e.g., Security Group Membership, Action Logs, and User Access Reviews).

Security Documentation Standards:
Ability to maintain high-standard documentation for auditors, including Security Design Specifications, Configuration Workbooks, and Standard Operating Procedures (SOPs).

Controlled Requirements Engineering:
Experience creating detailed User Stories and Functional Design Documents (FDD) that explicitly define security requirements, access constraints, and compliance controls.

Technical Root Cause Analysis:
Skilled in diagnosing complex access and data issues using Proxy functionality and system logs to identify and remediate security gaps or configuration defects.

Secure Testing Lifecycle:
Strong experience leading testing cycles (UAT/Regression) with a focus on Security Regression Testing to ensure that enhancements do not compromise existing control frameworks.

Cross-Functional Security Alignment:
Ability to partner with Internal Audit, IT Security, and Finance to align Workday security objects with global compliance standards (e.g., SOX, GDPR).

Security Release Analysis:
Experience evaluating the security impact of Workday Semi-Annual Releases, identifying risks in new features and managing the adoption of security-related enhancements.

Risk-Based Feature Optimization:
Ability to perform Fit-Gap Analysis for new features with a focus on enhancing system health, data integrity, and security sustainability.

Agile Governance:
Hands‑on experience using Jira or Service Now to manage security backlogs and sprints, ensuring all changes are tracked and approved through formal change management protocols.

Workday Pro certification: HCM and Security

IBM is committed to creating a diverse environment and is proud to be an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.