Federal Data Privacy & Security Counsel

Workday; Maryland; On-site; USD 180,000 - 240,000; Full time

Job summary

Workday Government seeks an experienced Senior Counsel to lead data privacy and cybersecurity legal matters across federal contracts. You will drive the FedRAMP authorization program in collaboration with security, compliance, and engineering teams, ensuring compliance with evolving DoD and federal standards.

The role involves advising leadership on governance and risk, negotiating government-friendly terms, and coordinating incident responses with internal and external stakeholders.

Qualifications

• Must have strong knowledge of privacy and cybersecurity law.
• Experience advising on government contracts and federal requirements.

Responsibilities

• Serve as lead counsel on data privacy and cybersecurity across the data lifecycle.
• Own legal strategy for FedRAMP authorization and the ATO process with security, compliance and engineering teams.
• Advise on DoD Cloud Computing SRG IL2–IL6 requirements, including data segregation and personnel screening.
• Draft, review, and negotiate contracts, data processing agreements, and government contracts with FAR/DFARS clauses.
• Monitor privacy/cyber law developments and translate them into practical guidance.
• Lead incident response for data breaches and coordinate with security, communications and outside counsel.
• Advise executive leadership on data governance and risk management.

Skills

Data privacy

Cybersecurity

Contract law

FedRAMP

Regulatory compliance

Job description

Workday Government seeks an experienced Senior Counsel to lead data privacy and cybersecurity legal matters across federal contracts. You will drive the FedRAMP authorization program in collaboration with security, compliance, and engineering teams, ensuring compliance with evolving DoD and federal standards.

The role involves advising leadership on governance and risk, negotiating government-friendly terms, and coordinating incident responses with internal and external stakeholders.