Staff Business Systems Analyst – Workday Security & ITGC Lead

About the role

We're looking for a Staff Business Systems Analyst – Workday Security & ITGC Lead to join Procore's Enterprise Technology and Business Platforms team. Reporting to the Sr. Director, Enterprise G&A Technology, this hands‑on technical role is based in Austin, Texas and is to be filled immediately.

Responsibilities

• Architect, configure, and maintain Workday security models (domain policies, business process security, constraint groups, segmented security) aligning configurations and workflows with security and compliance controls.
• Manage and audit all Workday integration system users (ISUs), API service accounts, and elevated access permissions; determine and maintain in‑scope service accounts for SOX ITGC and logical access reviews.
• Design, build, and maintain the inventory of Workday Key Reports (IPEs) used in financial and operational controls, utilizing advanced custom reports, calculated fields, and robust change‑tracking procedures to guarantee data completeness and accuracy.
• Act as the technical gatekeeper for Workday tenant configuration changes, semi‑annual feature updates, and new integrations, ensuring change management standards, SDLC protocols, and testing evidence are strictly executed prior to production deployment.
• Design, operationalize, and maintain IT Automated Controls (ITACs) and system‑enforced validation rules in Workday; monitor critical batch jobs, scheduled processes, integration failures, and ensure documented, timely resolution.
• Serve as the primary technical liaison for internal and external audits—independently leading walkthroughs, extracting system logs and security reports directly from Workday, and demonstrating how technical configurations prevent risk.
• Perform technical root‑cause analysis for any control failures, design technical fix/remediation plans in Workday, validate compensating controls, and drive automated solutions that eliminate manual compliance overhead.
• Apply AI/LLM tooling to streamline systems evidence collection, request triage, and audit documentation while maintaining strict data governance and auditability standards.
• Partner closely with Enterprise Integrations, HR Technology, Controllership, and Internal Audit, while mentoring Senior and Associate BSAs on Workday configuration standards and compliance execution.

Requirements

• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years of direct, hands‑on experience configuring and administering Workday.
• Proven proficiency in configuring Workday Security (domain/BP security policies, ISUs, SoD matrix, security groups) and developing advanced Custom Reports and Calculated Fields for key audit reporting (IPEs).
• Practical experience managing ITGC domains in production environments—logical access provisioning, privileged access reviews, service account management, SDLC/change control, and job scheduling.
• Demonstrated experience independently leading ITGC and ITAC technical walkthroughs with external audit teams for public companies or SEC registrants.
• Strong understanding of how business process configurations and tenant settings map to system controls, automated business process validations, and risk mitigation.
• Proven track record of performing exposure analysis, lookback assessments, and technical remediation for system or process deficiencies.
• Experience or practical interest in utilizing AI/LLM automation tools for systems operations, data processing, or compliance workflows.
• Relevant certifications strongly preferred (e.g., Workday Pro Security, Workday Pro Reporting, CISA, CISSP).

Pay

Base Pay Range: $127,680.00 - $175,560.00 USD annually. This role may also be eligible for Equity Compensation and/or Bonus Incentive Compensation.

Benefits

Eligible for Equity Compensation and/or Bonus Incentive Compensation.