Principal Cybersecurity GRC - FedRAMP (US Federal)

Workday • Reston, VA

2d • $154,300 - $274,100 • Hybrid

About The Position

The Principal Cybersecurity GRC - Public Sector role is a key member of Workday’s Cybersecurity Governance, Risk & Compliance function. The role leads the execution of U.S. public sector programs, including FedRAMP, and helps maintain compliance with public sector frameworks. Responsibilities include prioritizing future system changes, managing the FedRAMP audit lifecycle, leading compliance-related interactions with Workday customers, and advising internal business partners on product-development lifecycle requirements and strategic organizational initiatives.

The position supports one or more direct or indirect contracts with the U.S. Federal Government. Due to federal security requirements, all Workday personnel working on those contracts must be United States citizens, naturalized or native.

Workday’s cGRC Public Sector pillar supports its public-sector offerings through certification, continuous monitoring, consultation, and stakeholder alignment. Its programs include FedRAMP and other RAMP-adjacent programs, as well as international security and procurement frameworks.

Requirements

• 10 or more years of experience in an equivalent governance, risk and compliance and/or related engineering role.
• Experience prioritizing technical changes to a FedRAMP system and applying controls to ensure audit readiness and acceptability.
• Experience leading system design with engineering and providing technical guidance documentation.
• At least 4 years of experience with federal regulatory and security requirements and security standards such as the NIST framework.
• Experience designing federal SaaS cloud computing systems, including source control management, logging and monitoring systems, FIPS encryption methods, access controls, and vulnerability management.
• Auditor-facing and customer-facing audit management experience.
• Bachelor’s degree or equivalent experience.
• Strong written and verbal communication skills and attention to detail.
• Proven program or project management experience.
• Ability to lead multiple projects and organize time effectively.
• Organized and adaptable, with the ability to gain support and consensus from cross-functional partners.
• Must be a naturalized or native United States citizen if working on the covered U.S. Federal Government contracts.

Nice To Haves

• CISA, CISSP, PMP, CIPP, or other related certifications.

Responsibilities

• Lead execution of U.S. public-sector programs, including FedRAMP programs.
• Maintain compliance across public-sector frameworks.
• Help prioritize future changes to systems covered by FedRAMP.
• Manage the FedRAMP program audit lifecycle.
• Lead compliance-related interactions with Workday customers.
• Advise internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives.
• Work with engineering on system design and provide technical guidance documentation.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission or bonus.
• May be eligible for annual refresh stock grants.
• Workday provides a comprehensive benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal