TPRM Lead: Strategic Cyber Risk & Vendor Oversight

Workday

Reston (VA)

Hybrid

USD 171,000 - 256,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Workday is seeking a Senior Third-Party Security Risk Management Lead in Reston, VA. You will own and evolve the Cybersecurity TPRM program, lead principal risk assessments across the risk portfolio, and collaborate with Security, IT, Legal, Procurement, Privacy and Compliance to identify and remediate security gaps.

You will drive risk-based decisions, establish metrics and dashboards, and explore automation and AI-enabled tooling to scale risk management while partnering with stakeholders

Qualifications

12+ years experience in GRC and leading GRC initiatives.
7+ years implementing modern GRC tools to automate evidence collection.
BS/MS in a related technical field or equivalent practical experience.

Responsibilities

Own and evolve the Cybersecurity third-party risk management program.
Lead risk assessments for critical third parties and monitor issues.
Perform broader risk assessments including control reviews and ERM activities.
Engage with Legal, Procurement, Privacy and Compliance to manage risk.
Establish risk metrics, dashboards, and ODMs to show program progress.
Drive automation and evaluate AI-enabled tooling to scale the program.

Skills

GRC leadership

Stakeholder management

Policy & risk communication

GRC frameworks

AI governance

Education

BS/MS in CS or info security or MIS

Tools

ServiceNow GRC

OneTrust

Archer

LogicGate

GRC automation tooling

Job description

You will drive risk-based decisions, establish metrics and dashboards, and explore automation and AI-enabled tooling to scale risk management while partnering with stakeholders

Get your free, confidential resume review.

or drag and drop your file here.