Staff Business Systems Analyst – Workday Security & ITGC Lead

Procore Technologies is hiring a Staff Business Systems Analyst to own Workday security architecture, tenant configurations, business process engineering, and reporting infrastructure. The role focuses on hands-on Workday administration, ITGC and SOX compliance, audit leadership, control remediation, and operational innovation.

Responsibilities:

• Hands-on Workday Configuration & Security: Architect, configure, and maintain Workday security models (domain policies, business process security, constraint groups, segmented security), ensuring system configurations and business process workflows align directly with security and compliance controls
• Service Account Governance: Manage and audit all Workday integration system users (ISUs), API service accounts, and elevated access permissions; determine and maintain in-scope service accounts for SOX ITGC and logical access reviews
• Key Reporting & Data Integrity: Design, build, and maintain the inventory of Workday Key Reports (IPEs) used in financial and operational controls, utilizing advanced custom reports, calculated fields, and robust change-tracking procedures to guarantee data completeness and accuracy
• Technical Change Management: Act as the technical gatekeeper for Workday tenant configuration changes, semi-annual feature updates, and new integrations, ensuring change management standards, SDLC protocols, and testing evidence are strictly executed prior to production deployment
• Automated Controls & Job Monitoring: Design, operationalize, and maintain IT Automated Controls (ITACs) and system-enforced validation rules in Workday; monitor critical batch jobs, scheduled processes, integration failures, and ensure documented, timely resolution
• Audit Leadership & Evidence Technical Lead: Serve as the primary technical liaison for internal and external audits—independently leading walkthroughs, extracting system logs and security reports directly from Workday, and demonstrating how technical configurations prevent risk
• Deficiency Remediation & Systems Rationalization: Perform technical root-cause analysis for any control failures, design technical fix/remediation plans in Workday, validate compensating controls, and drive automated solutions that eliminate manual compliance overhead
• AI & Operational Innovation: Apply AI/LLM tooling to streamline systems evidence collection, request triage, and audit documentation while maintaining strict data governance and auditability standards
• Cross-Functional & Team Mentorship: Partner closely with Enterprise Integrations, HR Technology, Controllership, and Internal Audit, while mentoring Senior and Associate BSAs on Workday configuration standards and compliance execution

Requirements:

• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years of direct, hands-on experience configuring and administering Workday
• Proven proficiency in configuring Workday Security (domain/BP security policies, ISUs, SoD matrix, security groups) and developing advanced Custom Reports and Calculated Fields for key audit reporting (IPEs)
• Practical experience managing ITGC domains in production environments—logical access provisioning, privileged access reviews, service account management, SDLC/change control, and job scheduling
• Demonstrated experience independently leading ITGC and ITAC technical walkthroughs with external audit teams for public companies or SEC registrants
• Strong understanding of how business process configurations and tenant settings map to system controls, automated business process validations, and risk mitigation
• Proven track record of performing exposure analysis, lookback assessments, and technical remediation for system or process deficiencies
• Experience or practical interest in utilizing AI/LLM automation tools for systems operations, data processing, or compliance workflows
• Relevant certifications strongly preferred (e.g., Workday Pro Security, Workday Pro Reporting, CISA, CISSP)