Staff Business Systems Analyst – Workday Security & ITGC Lead

Procore Technologies is seeking a Staff Business Systems Analyst to serve as the technical owner for Workday security, tenant configuration, business process engineering, reporting infrastructure, and ITGC compliance. The role will lead security governance, automated controls, audit walkthroughs, technical change management, deficiency remediation, and cross-functional mentorship in a remote US environment.

Responsibilities:

• Hands-on Workday Configuration & Security: Architect, configure, and maintain Workday security models (domain policies, business process security, constraint groups, segmented security), ensuring system configurations and business process workflows align directly with security and compliance controls
• Service Account Governance: Manage and audit all Workday integration system users (ISUs), API service accounts, and elevated access permissions; determine and maintain in-scope service accounts for SOX ITGC and logical access reviews
• Key Reporting & Data Integrity: Design, build, and maintain the inventory of Workday Key Reports (IPEs) used in financial and operational controls, utilizing advanced custom reports, calculated fields, and robust change-tracking procedures to guarantee data completeness and accuracy
• Technical Change Management: Act as the technical gatekeeper for Workday tenant configuration changes, semi-annual feature updates, and new integrations, ensuring change management standards, SDLC protocols, and testing evidence are strictly executed prior to production deployment
• Automated Controls & Job Monitoring: Design, operationalize, and maintain IT Automated Controls (ITACs) and system-enforced validation rules in Workday; monitor critical batch jobs, scheduled processes, integration failures, and ensure documented, timely resolution
• Audit Leadership & Evidence Technical Lead: Serve as the primary technical liaison for internal and external audits—independently leading walkthroughs, extracting system logs and security reports directly from Workday, and demonstrating how technical configurations prevent risk
• Deficiency Remediation & Systems Rationalization: Perform technical root-cause analysis for any control failures, design technical fix/remediation plans in Workday, validate compensating controls, and drive automated solutions that eliminate manual compliance overhead
• AI & Operational Innovation: Apply AI/LLM tooling to streamline systems evidence collection, request triage, and audit documentation while maintaining strict data governance and auditability standards
• Cross-Functional & Team Mentorship: Partner closely with Enterprise Integrations, HR Technology, Controllership, and Internal Audit, while mentoring Senior and Associate BSAs on Workday configuration standards and compliance execution

Requirements:

• 7+ years in business systems analysis, IT systems administration, or IT compliance, with 4+ years of direct, hands-on experience configuring and administering Workday
• Proven proficiency in configuring Workday Security (domain/BP security policies, ISUs, SoD matrix, security groups) and developing advanced Custom Reports and Calculated Fields for key audit reporting (IPEs)
• Practical experience managing ITGC domains in production environments—logical access provisioning, privileged access reviews, service account management, SDLC/change control, and job scheduling
• Demonstrated experience independently leading ITGC and ITAC technical walkthroughs with external audit teams for public companies or SEC registrants
• Strong understanding of how business process configurations and tenant settings map to system controls, automated business process validations, and risk mitigation
• Proven track record of performing exposure analysis, lookback assessments, and technical remediation for system or process deficiencies
• Experience or practical interest in utilizing AI/LLM automation tools for systems operations, data processing, or compliance workflows
• Relevant certifications strongly preferred (e.g., Workday Pro Security, Workday Pro Reporting, CISA, CISSP)