Strategic IT Risk & Controls Leader

Workday; Pleasanton (CA); Hybrid; USD 131,000 - 232,000; Full time

Benefits offered by this job

Health insurance

Job summary

Workday seeks a seasoned GRC leader in Pleasanton, CA to drive the risk management framework, compliance strategy, and risk assessments across the Business Technology function. You will partner with Security, Internal Audit, and Compliance to implement controls, manage remediation, and embed a proactive risk culture.

Federal SaaS and privacy knowledge are highly valued. The role offers hybrid work in the USA with a competitive base pay and potential bonus, and opportunities to shape security

Qualifications

• 8+ years experience in GRC, developing and implementing GRC policies and procedures.
• 8+ years of experience conducting internal audits, and managing regulatory compliance.
• 8+ years of experience in risk assessment methodologies, control frameworks, and regulatory requirements.

Responsibilities

• Lead Risk & Control Analysis with Security, Internal Audit, BT, and Compliance.
• Manage remediation actions and timelines, and follow-up programs.
• Project leadership to establish a risk assessment process for BT technology.

Skills

GRC expertise

Internal controls

Audit procedures

Education

Bachelor’s degree or higher

Tools

ISO 27001

SOC 1/2

CISA, PMP, CIPP

Job description

Workday seeks a seasoned GRC leader in Pleasanton, CA to drive the risk management framework, compliance strategy, and risk assessments across the Business Technology function. You will partner with Security, Internal Audit, and Compliance to implement controls, manage remediation, and embed a proactive risk culture.

Federal SaaS and privacy knowledge are highly valued. The role offers hybrid work in the USA with a competitive base pay and potential bonus, and opportunities to shape security