Senior Principal Cybersecurity GRC - Public Sector, US Federal
About The Position
The Senior Principal Cybersecurity GRC - Public Sector role is part of Workday’s Cybersecurity Governance, Risk, Compliance & Trust (cGRCT) function. The role leads the design, implementation, and assessment of Workday’s U.S. Federal offerings, ensuring continued compliance across public sector frameworks. It supports prioritization of future system changes and manages the audit lifecycle for the FedRAMP program. The position leads security and compliance interactions with Workday’s Federal customers and advises internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives. It supports one or more direct or indirect U.S. Federal Government contracts, so personnel working on those contracts must be U.S. citizens. The role may require a TS/SCI with CI Poly security clearance; applicants must be able to obtain and maintain a U.S. government-issued clearance, and an active clearance is preferred. The position may require onsite work at client locations in the DC, Maryland, and Virginia area. Workday uses a flexible work approach that combines in-person and remote work. Teams spend at least half of their time each quarter in the office or in the field with customers, prospects, and partners, depending on the role. The position is based primarily in Reston, Virginia, with additional U.S. location pay ranges listed.
Requirements
- At least 12 years of experience in an equivalent governance, risk and compliance and/or related engineering role.
- At least 5 years of direct experience with the FedRAMP Framework, DoD Impact Levels IL4, IL5, and IL6, and Intelligence Community Directive (ICD) 503 requirements.
- Experience prioritizing technical changes to a FedRAMP system and applying controls to ensure audit readiness and acceptability.
- Bachelor’s degree or equivalent experience.
- Experience leading system design with engineering and providing technical guidance documentation.
- Experience designing federal SaaS cloud computing systems, including source control management, logging and monitoring systems, FIPS encryption methods, access controls, and vulnerability management.
- Experience with Intelligence and/or DoD programs.
- Strong written and verbal communication skills and attention to detail.
- Proven program or project management experience, especially audit management.
- Ability to lead multiple projects and organize time effectively.
- Organized and adaptable, with the ability to gain support and consensus with cross-functional partners.
- Must be a U.S. citizen (naturalized or native) if working on the supported U.S. Federal Government contracts.
- Ability to obtain and maintain a U.S. government-issued security clearance.
- May be required to work onsite at client locations in the DC, Maryland, and Virginia area.
Nice To Haves
- Active TS/SCI with CI Poly security clearance.
- CISA, CISSP, PMP, CIPP, or other related certification.
- DoD 8570/8140 compliance with at least IAT Level II certification, including a current Computing Environment credential and one approved specialty certification, such as CompTIA CySA+, GICSP, or CASP+.
Responsibilities
- Lead the design, implementation, and assessment of Workday’s U.S. Federal offerings.
- Ensure continued compliance across public sector frameworks.
- Help prioritize future system changes and apply controls to support audit readiness and acceptability.
- Manage the audit lifecycle for the FedRAMP program.
- Lead security and compliance-related interactions with Workday’s Federal customers.
- Advise internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives.
- Lead system design with engineering and provide technical guidance documentation.
- Lead and organize multiple projects, particularly audit management.
Benefits
- May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
- May be eligible for annual refresh stock grants.
- Comprehensive benefits are referenced, but specific benefits are not listed in the posting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
