IT Risk & GRC Leader — Compliance & Security Strategy

Workday; United States; Hybrid; USD 131,000 - 232,000; Full time

Benefits offered by this job

Flexible work arrangements

Competitive compensation

Job summary

Workday is seeking a seasoned GRC leader to design and implement a comprehensive risk management program across its BT organization. You will collaborate with Security, Internal Audit, and Compliance to assess risks, define controls, and drive remediation across the company.

The role emphasizes governance, policy development, and ensuring regulatory alignment for a scalable, secure cloud platform used by business partners worldwide.

Qualifications

• 8 years of experience in GRC policy design and implementation.
• 8 years of experience in audits and regulatory compliance.
• 8 years of risk assessment methodologies and controls.

Responsibilities

• Design and implement BT Risk Management Framework with clear roles and prioritization.
• Lead compliance strategy enhancements and security controls across BT.
• Oversee risk assessment processes with Security, Internal Audit, and Compliance teams.
• Drive remediation actions with management and track closure of action plans.
• Lead projects to establish risk assessment for BT technology and address findings.

Skills

GRC experience

Internal audits

Regulatory compliance

Risk assessment

Education

Bachelor’s degree (business/law/finance/info security)

Tools

ISO 27001

SOC1

SOC2

CISA

PMP

Job description

Workday is seeking a seasoned GRC leader to design and implement a comprehensive risk management program across its BT organization. You will collaborate with Security, Internal Audit, and Compliance to assess risks, define controls, and drive remediation across the company.

The role emphasizes governance, policy development, and ensuring regulatory alignment for a scalable, secure cloud platform used by business partners worldwide.