Principal Cybersecurity GRC - FedRAMP (US Federal)
About The Position
The Principal Cybersecurity GRC role is part of Workday’s Cybersecurity Governance, Risk & Compliance function and supports public sector programs, including FedRAMP. The position supports one or more direct or indirect U.S. Federal Government contracts. Due to federal security requirements, personnel working on those contracts must be United States citizens, naturalized or native. The role leads execution of U.S. public sector programs and helps maintain compliance with public sector frameworks. It prioritizes changes to systems, supports audit readiness, and manages the FedRAMP audit lifecycle. The position also leads compliance-related interactions with Workday customers and advises internal business partners on risk and compliance requirements affecting product development and other strategic initiatives. Workday uses a flexible-work approach combining in-person and remote work. Employees spend at least half of their time each quarter in the office or in the field with customers, prospects, and partners, depending on the role. Remote home-office employees may also come together in offices for important moments.
Requirements
- At least 10 years of experience in an equivalent governance, risk and compliance and/or related engineering role.
- Experience prioritizing technical changes to a FedRAMP system and applying controls to ensure audit readiness and acceptability.
- Experience leading system design with engineering and providing technical guidance documentation.
- At least 4 years of experience with federal regulatory and security requirements and security standards such as the NIST framework.
- Experience designing federal SaaS cloud computing systems, including source control management, logging and monitoring systems, FIPS encryption methods, access controls, and vulnerability management.
- Audit management experience, including auditor-facing and customer-facing work.
- Bachelor’s degree or equivalent experience.
- Strong written and verbal communication skills and attention to detail.
- Proven program or project management experience.
- Ability to lead multiple projects and organize time effectively.
- Organized and adaptable, with the ability to gain support and consensus from cross-functional partners.
- Must be a United States citizen, naturalized or native, if working on the supported federal government contracts.
Nice To Haves
- CISA, CISSP, PMP, CIPP, or other related certifications.
Responsibilities
- Lead execution of U.S. public sector programs, including FedRAMP programs.
- Help ensure continued compliance across public sector frameworks.
- Prioritize future technical changes to FedRAMP systems and apply controls to maintain audit readiness and acceptability.
- Lead system design with engineering and provide technical guidance documentation.
- Manage the FedRAMP program audit lifecycle and lead audit-related interactions with auditors and customers.
- Lead compliance-related interactions with Workday customers.
- Advise internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives.
- Coordinate and gain support and consensus with cross-functional partners.
Benefits
- May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
- May be eligible for annual refresh stock grants.
- Comprehensive benefits are referenced; specific benefits are not detailed in the posting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
