TPRM Lead: Cybersecurity Vendor Risk & AI Governance

Relha LLC; Reston (VA); Hybrid; USD 171,000 - 256,000; Full time

Job summary

Workday seeks a Third-Party Security Risk Management (TPRM) Lead in Reston, VA to own and evolve the cybersecurity vendor risk program. You will partner with Security, IT, Legal, and Procurement to identify gaps, assess risk, and drive remediation with leadership visibility.

The role blends strategic ownership with hands-on risk assessment and continuous improvement, including automation and AI-enabled tooling to scale risk operations responsibly.

Qualifications

• Extensive experience leading GRC initiatives and maintaining compliant programs.
• Proven ability to implement modern GRC tools for automation and monitoring.
• Strong understanding of third-party risk across the lifecycle and governance frameworks.

Responsibilities

• Own and mature the Cybersecurity third-party risk program strategy.
• Lead risk assessments for critical vendors and monitor ongoing due diligence.
• Translate risk into business impact and drive remediation plans.
• Engage stakeholders across Legal, Procurement, Security, Privacy, and Compliance.
• Develop metrics, dashboards, and ODMs to show program progress.

Skills

GRC leadership

TPRM expertise

Risk analysis

Stakeholder management

Education

BS/MS in CS/InfoSec/MIS

Tools

ServiceNow GRC

OneTrust

Archer

LogicGate

Job description

Workday seeks a Third-Party Security Risk Management (TPRM) Lead in Reston, VA to own and evolve the cybersecurity vendor risk program. You will partner with Security, IT, Legal, and Procurement to identify gaps, assess risk, and drive remediation with leadership visibility.

The role blends strategic ownership with hands-on risk assessment and continuous improvement, including automation and AI-enabled tooling to scale risk operations responsibly.