Senior Public Sector GRC Lead - FedRAMP & Compliance

Workday, Inc.; Reston (VA); Hybrid; USD 171,000 - 256,000; Full time

Job summary

Workday, Inc. in Reston, VA is seeking a Principal Cybersecurity GRC - Public Sector to lead FedRAMP programs and ensure ongoing compliance across federal frameworks.

You’ll partner with engineering and customers, own audit lifecycles, and guide risk and compliance requirements across the product lifecycle. Strong communication and program management needed, with 10+ years in GRC and relevant certifications.

Qualifications

• 10+ years of governance, risk & compliance or related engineering experience.
• Experience prioritizing FedRAMP changes and control implementation.
• Experience leading system design with engineering for guidance docs.
• 4+ years with federal regulatory security standards (NIST).
• Experience designing federal SaaS cloud systems (logging, encryption, access controls, vulnerability mgmt).
• Audit management experience (auditor-facing and customer-facing).
• Bachelor's degree or equivalent experience.

Responsibilities

• Lead US public sector program execution including FedRAMP.
• Ensure compliance across public sector frameworks.
• Prioritize system changes and manage audit lifecycle.
• Advise internal partners on risk and compliance in product life cycle.

Skills

Governance & Risk

Audit management

FedRAMP

Security frameworks

Education

Bachelor's degree or equivalent

Tools

Source control

Logging & monitoring

FIPS encryption

Job description

Workday, Inc. in Reston, VA is seeking a Principal Cybersecurity GRC - Public Sector to lead FedRAMP programs and ensure ongoing compliance across federal frameworks.

You’ll partner with engineering and customers, own audit lifecycles, and guide risk and compliance requirements across the product lifecycle. Strong communication and program management needed, with 10+ years in GRC and relevant certifications.