Senior Principal Cybersecurity GRC — Federal Sector Leader

Workday, Inc.; Reston (VA); On-site; USD 201,000 - 302,000; Full time

Benefits offered by this job

Health and welfare benefits

Job summary

Workday, Inc. is seeking a Senior Principal Cybersecurity GRC - Public Sector to lead design, implementation, and assessment of federal offerings, ensuring compliance across the FedRAMP and DoD frameworks. This role collaborates with engineering and product teams to align security controls with customer requirements.

The role may require TS/SCI w/CI Poly clearance and on-site work in the DC/MD/VA region. You will drive audit readiness, manage certification activities, and advise on risk for

Qualifications

• 12+ years of governance, risk & compliance experience.
• 5+ years direct experience with FedRAMP, DoD IL4/IL5/IL6 and ICD 503 requirements.
• Experience prioritizing FedRAMP changes and ensuring audit readiness.
• Experience leading system design with engineering for technical guidance.
• Experience designing federal SaaS cloud systems with encryption, access controls and monitoring.
• Experience with Intelligence and/or DoD programs.
• Strong written and verbal communication and attention to detail.
• Program/project management experience, especially audit management.
• Ability to lead multiple projects and gain cross-functional consensus.
• Certifications such as CISA, CISSP, PMP, CIPP or similar.

Responsibilities

• Lead design, implementation and assessment of Workday's US Federal offerings.
• Manage audit lifecycle for the FedRAMP program.
• Lead security and compliance interactions with Federal customers.
• Advise internal partners on risk and compliance across the product lifecycle.

Skills

GRC experience

FedRAMP

Security compliance

Communication skills

Education

Bachelor's degree or equivalent

Tools

Source control management

Logging & monitoring

Vulnerability management

Job description

Workday, Inc. is seeking a Senior Principal Cybersecurity GRC - Public Sector to lead design, implementation, and assessment of federal offerings, ensuring compliance across the FedRAMP and DoD frameworks. This role collaborates with engineering and product teams to align security controls with customer requirements.

The role may require TS/SCI w/CI Poly clearance and on-site work in the DC/MD/VA region. You will drive audit readiness, manage certification activities, and advise on risk for