FedRAMP & Public Sector GRC Leader

VulnU; Reston (VA); Hybrid; USD 154,000 - 274,000; Full time

Job summary

Workday is seeking a Principal Cybersecurity GRC for the FedRAMP program in Reston, VA. You will lead US public sector compliance, guide engineering on controls, and manage audits to maintain strong security posture across federal frameworks.

Required 10+ years in governance, risk & compliance and 4+ years in federal requirements; strong communication and project management skills are essential for cross-functional collaboration.

Qualifications

• 10 years of governance, risk & compliance and/or related engineering experience.
• Experience prioritizing changes to FedRAMP systems and applying controls for audit readiness.
• Ability to design system changes with engineering to provide technical guidance documentation.
• 4 years of federal regulatory experience and security standards (e.g., NIST).
• Experience designing federal SaaS cloud computing systems including source control, logging, monitoring, encryption, access controls and vulnerability management.
• Audit management experience (auditor-facing and customer-facing).
• Bachelor's degree or equivalent experience.

Responsibilities

• Lead execution of US public sector programs including FedRAMP.
• Coordinate with engineering to implement controls and security requirements.
• Manage the audit lifecycle and customer interactions.
• Advise internal partners on risk and compliance in product development lifecycle.

Skills

Governance, risk & compliance

Program management

Audit management

Federal regulatory requirements

Communication skills

Cross-functional collaboration

Risk assessment

Security controls

Documentation

Education

Bachelor's degree or equivalent experience

Job description

Workday is seeking a Principal Cybersecurity GRC for the FedRAMP program in Reston, VA. You will lead US public sector compliance, guide engineering on controls, and manage audits to maintain strong security posture across federal frameworks.

Required 10+ years in governance, risk & compliance and 4+ years in federal requirements; strong communication and project management skills are essential for cross-functional collaboration.