# Principal Cybersecurity GRC - Public Sector

**Company**: Workday
**Location**: Reston, VA
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $170,600 USD - $255,800 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Principal-Cybersecurity-GRC---FedRAMP--US-Federal-_JR-0109432-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0d56564c-b48

## Description

We’re Workday, a leading AI platform for managing people, money, and agents. We're seeking a Principal Cybersecurity GRC - Public Sector to join our team.

**About the Team** The Workday Cybersecurity Governance, Risk & Compliance (cGRC) team enables business agility while maintaining a strong security posture via intelligent risk-taking, optimized controls management, and iterative security governance.

**About the Role** This role will support one or more direct or indirect contracts with the U.S. Federal Government which, due to federal government security requirements, mandates that all Workday personnel working on the contracts be United States citizens (naturalized or native).

As a Principal Cybersecurity GRC - Public Sector, you will play a vital role in ensuring continued compliance across public sector frameworks, assist in prioritizing future system changes and manage the audit lifecycle for the FedRAMP program. You will lead compliance related interactions with Workday's customers and advising internal business partners on risk and compliance requirements related to the product development lifecycle and other strategic organizational initiatives.

**Responsibilities**

- Prioritize technical changes to a FedRAMP system and apply controls to ensure audit readiness and acceptability

- Lead system design with engineering to provide technical guidance documentation

- Manage the audit lifecycle for the FedRAMP program

- Lead compliance related interactions with Workday's customers and advising internal business partners on risk and compliance requirements

**Requirements**

- 10+ years of experience in an equivalent governance, risk & compliance and/or related engineering role

- Experience prioritizing technical changes to a FedRAMP system and apply controls to ensure audit readiness and acceptability

- Experience leading system design with engineering to provide technical guidance documentation

- 4+ years of experience with federal regulatory, security requirements, and security standards like NIST framework

- Experience designing federal SaaS cloud computing systems including source control management, logging & monitoring systems, FIPS encryption methods, access controls and vulnerability management

- Audit management experience (auditor-facing and customer-facing)

- Bachelor's degree or equivalent experience

**Benefits**

- Annualized base salary range: $170,600 USD - $255,800 USD

- Eligible for Workday Bonus Plan or role-specific commission/bonus

- Annual refresh stock grants

- Comprehensive benefits package

**Flexible Work**

- Combine in-person time and remote work

- Spend at least half (50%) of time each quarter in the office or in the field

## Skills

### Required
- FedRAMP
- NIST framework
- cloud computing
- source control management
- logging & monitoring systems
- FIPS encryption methods
- access controls
- vulnerability management
- audit management

### Nice to have
- CISA
- CISSP
- PMP
- CIPP

---

Source: [Apply at workday.wd5.myworkdayjobs.com](https://workday.wd5.myworkdayjobs.com/en-US/Workday/job/USAVAReston/Principal-Cybersecurity-GRC---FedRAMP--US-Federal-_JR-0109432-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)