Federal Data Privacy & Cybersecurity Counsel

Workday; Washington (District of Columbia); On-site; USD 190,000 - 313,000; Full time

Job summary

Workday Government in the DC metro area seeks a seasoned data privacy and cybersecurity attorney to guide FedRAMP authorization and DoD IL accreditation. You will draft, review, and negotiate government contracts while advising on privacy and security law across the data lifecycle.

The role requires JD and 8+ years’ experience, with deep knowledge of FISMA, NIST, and CMMC. On-site work in the DMV area is expected, with flexible work policies.

Qualifications

• J.D. Degree and active membership in at least one state bar
• 8+ years of experience as a practicing attorney with strong focus on data privacy and cybersecurity
• Experience advising on FedRAMP authorization processes
• Direct experience with DoD Impact Levels and SRG
• Strong knowledge of FISMA, NIST 800-53/171, and CMMC

Responsibilities

• Serve as lead counsel on data privacy and cybersecurity matters, advising on compliance
• Own the legal strategy for FedRAMP authorization and ATO programs
• Advise on DoD SRG IL levels, data segregation, and screening requirements
• Draft and negotiate contracts, DPAs, and government vehicle clauses
• Monitor regulatory developments and translate them into practical guidance
• Lead incident response for data breaches and coordinate with stakeholders
• Advise executives on governance, risk, and contracting opportunities

Skills

Data privacy

Cybersecurity

Contract negotiation

Regulatory compliance

Policy guidance

Education

J.D. Degree

Tools

FAR/DFARS

FedRAMP authorization

DoD ILs (IL2-IL6)

Job description

Workday Government in the DC metro area seeks a seasoned data privacy and cybersecurity attorney to guide FedRAMP authorization and DoD IL accreditation. You will draft, review, and negotiate government contracts while advising on privacy and security law across the data lifecycle.

The role requires JD and 8+ years’ experience, with deep knowledge of FISMA, NIST, and CMMC. On-site work in the DMV area is expected, with flexible work policies.