TPRM Lead - Cybersecurity Vendor Risk & Governance

Workday, Inc.; Reston (VA); Hybrid; USD 171,000 - 256,000; Full time

Job summary

Workday, Inc. is seeking a Senior Third‑Party Security Risk Management Lead within the Cybersecurity Risk team in Reston, VA.

You will own the TPRM program, drive risk assessments for key vendors, and collaborate with Legal, Procurement, Privacy, and Compliance to prioritize and remediate identified risks. You will lead cross‑functional initiatives, use data‑driven metrics, and explore automation and AI tooling to scale risk management while ensuring regulatory alignment.

Qualifications

• Led GRC initiatives and maintained compliant frameworks across the organization.
• Experience automating evidence collection and continuous monitoring with modern GRC tools.
• Relevant technical degree or equivalent practical experience.

Responsibilities

• Own and evolve the third‑party risk management program.
• Lead risk assessments for critical vendors and ensure due diligence and monitoring.
• Translate risk into business impact and present prioritization to senior leadership.
• Collaborate with Legal, Procurement, Privacy and Compliance to document and mitigate risks.

Skills

GRC leadership

TPRM

risk assessment

vendor risk

stakeholder management

communication

automation tooling

AI governance

Education

BS/MS in Computer Science / Information Security / MIS

Tools

ServiceNow GRC

OneTrust

Archer

LogicGate

Job description

Workday, Inc. is seeking a Senior Third‑Party Security Risk Management Lead within the Cybersecurity Risk team in Reston, VA.

You will own the TPRM program, drive risk assessments for key vendors, and collaborate with Legal, Procurement, Privacy, and Compliance to prioritize and remediate identified risks. You will lead cross‑functional initiatives, use data‑driven metrics, and explore automation and AI tooling to scale risk management while ensuring regulatory alignment.