Senior Principal Cybersecurity GRC - Public Sector, US Federal

Workday • Reston, VA

3d • Hybrid

About The Position

The Senior Principal Cybersecurity GRC - Public Sector role is part of Workday’s Cybersecurity Governance, Risk, Compliance & Trust function and supports one or more direct or indirect U.S. Federal Government contracts. The role leads the design, implementation, and assessment of Workday’s U.S. Federal offerings; supports ongoing compliance across public sector frameworks; helps prioritize future system changes; and manages the FedRAMP audit lifecycle. It also leads security and compliance interactions with Federal customers and advises internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives.

Due to federal government security requirements, all Workday personnel working on the supported contracts must be U.S. citizens, naturalized or native. The role may require a TS/SCI with CI Poly security clearance, and the employee must be able to obtain and maintain a U.S. government-issued clearance. An active TS/SCI with CI Poly is preferred. The position may require onsite work at client locations in the DC, Maryland, and Virginia area.

Workday uses a flexible-work approach combining in-person and remote work. Employees spend at least 50% of their time each quarter in the office or in the field with customers, prospects, and partners, depending on role. Remote home-office employees may also attend important in-person gatherings.

Requirements

• 12 or more years of experience in an equivalent governance, risk and compliance and/or related engineering role.
• At least 5 years of direct experience with the FedRAMP Framework, DoD Impact Levels IL4, IL5, and IL6, and Intelligence Community Directive (ICD) 503 requirements.
• U.S. citizenship (naturalized or native) is required for personnel working on the supported U.S. Federal Government contracts.
• Ability to obtain and maintain a U.S. government-issued security clearance.
• Experience prioritizing technical changes to a FedRAMP system and applying controls to ensure audit readiness and acceptability.
• Bachelor’s degree or equivalent experience.
• Experience leading system design with engineering and providing technical guidance documentation.
• Experience designing federal SaaS cloud computing systems, including source control management, logging and monitoring systems, FIPS encryption methods, access controls, and vulnerability management.
• Experience with Intelligence and/or Department of Defense programs.
• Strong written and verbal communication skills and attention to detail.
• Proven program or project management experience, especially audit management.
• Ability to lead multiple projects and organize time effectively.
• Organized and adaptable, with the ability to gain support and consensus with cross-functional partners.

Nice To Haves

• An active TS/SCI with CI Poly security clearance.
• CISA, CISSP, PMP, CIPP, or other related certifications.
• DoD 8570/8140 compliance with at least an IAT Level II certification, including a current Computing Environment (CE) credential and one approved specialty certification, such as CompTIA CySA+, GICSP, or CASP+.

Responsibilities

• Lead the design, implementation, and assessment of Workday’s U.S. Federal offerings.
• Help ensure continued compliance across public sector frameworks.
• Assist in prioritizing future system changes.
• Manage the audit lifecycle for the FedRAMP program.
• Lead security- and compliance-related interactions with Workday’s Federal customers.
• Advise internal business partners on risk and compliance requirements related to product development and strategic organizational initiatives.
• Provide technical guidance and documentation in collaboration with engineering on system design.
• Prioritize technical changes to FedRAMP systems and apply controls to support audit readiness and acceptability.

Benefits

• May be eligible for the Workday Bonus Plan or a role-specific commission/bonus.
• May be eligible for annual refresh stock grants.
• Comprehensive benefits are referenced, but specific benefits are not listed in the posting.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior