Your work days are brighter here.
Were obsessed with making hard work pay off for our people our customers and the world around us. As a Fortune 500 company and a leading AI platform for managing people money and agents were shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join youll feel it. Not just in the products we build but in how we show up for each other. Our culture is rooted in integrity empathy and shared enthusiasm. Were in this together tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether youre building smarter solutions supporting customers or creating a space where everyone belongs youll do meaningful work with Workmates whove got your return well give you the trust to take risks the tools to grow the skills to develop and the support of a company invested in you for the long haul. So if you want to inspire a brighter work day for everyone including yourself youve found a match in Workday and we hope to be a match for you too.
About the Team
Workdays Cybersecurity GRC team is the guardian of customer trust. We are responsible for building and managing programs designed to protect the confidentiality integrity and availability (CIA) of our customers most sensitive data. We ensure that company practices policies and processes are performed in accordance with contractual and regulatory requirements and Workdays core values and help represent these practices to our customers.About the Role
About the Role
We are looking for an experienced Cybersecurity GRC leader to act as a key representative for the cGRC organization within Workday Cybersecurity & Trust. You should have Cybersecurity Compliance experience providing Go-to-market security support within a fast-paced SaaS environment managing complex security audit cycles and working with cybersecurity risks.
The successful candidate will have a demonstrated ability to project manage audits and certifications and manage separate workstreams such as security questionnaires customer calls and security risk assessments. This will require you to work effectively within your own team but also to coordinate with others in teams both locally and in other time zones.
About You
About You
Basic Qualifications:
Minimum of 6-8 years of experience in Security Compliance Risk Management or IT Audit
Strong proficiency in industry compliance standards specifically SOC1 (SSAE18) SOC2 and ISO27001.
Solid understanding of Cloud Computing and Software as a Service (SaaS) operational models particularly regarding risk frameworks and security controls.
Excellent problem-solving skills and a proven ability to manage multiple complex projects simultaneously while maintaining high attention to detail.
Strong verbal and written communication skills for global team interaction and customer-facing engagements.
Desired Qualifications:
Familiarity with managing external auditors and coordinating resource planning across global matrixes organisations.
Experience with customer support or GTM enablement specifically in articulating security postures to external stakeholders.
Professional certifications such as CISA CISM CISSP or CRISC are highly preferred.
Professional and Soft Skills:
Strong collaboration and communication skills with the ability to contribute effectively to technical discussions and decisions.
Proven ability to analyze complex technical security problems and propose pragmatic business-enabling solutions.
Excellent written and verbal communication skills with the ability to articulate complex security and risk implications to both technical and non-technical stakeholders.
Demonstrates strong ownership of tasks and projects delivering high-quality work with minimal supervision.
Our Approach to Flexible Work
With Flex Work were combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections maintain a strong community and do their best work. We know that flexibility can take shape in many ways so rather than a number of required days in-office each week we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers prospects and partners (depending on role). This means youll have the freedom to create a flexible schedule that caters to your business team and personal needs while being intentional to make the most of time spent together. Those in our remote home office roles also have the opportunity to come together in our offices for important moments that matter.
At Workday we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point please email .
Are you being referred to one of our roles If so ask your connection at Workday about our Employee Referral process!
At Workday we value our candidates privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.
Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.
In addition Workday will never ask candidates to pay a recruiting fee or pay for consulting or coaching services in order to apply for a job at Workday.
Required Experience:
Manager