Apply on Employer Site

Workday · 5 days ago

Cybersecurity GRC - US Federal

McLean, VA

Full-time

Hybrid

Mid, Senior Level

$112K/yr - $168K/yr

5+ years exp

Workday is a Fortune 500 company and a leading AI platform for managing people, money, and agents. The Cybersecurity GRC - Public Sector role is essential for leading the design and implementation of Workday's US National Security offerings while ensuring compliance with federal frameworks.

Artificial Intelligence (AI)Cloud ComputingEnterprise SoftwareHuman ResourcesSaaSSoftware

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support one or more direct or indirect contracts with the U.S. Federal Government

Lead the design, implementation and assessment of Workday's US National Security offerings

Ensure continued compliance across public sector frameworks

Assist in prioritizing future system changes

Manage the audit lifecycle for the various DoD and IC programs

Lead security and compliance related interactions with Workday's National Security customers

Advise internal business partners on risk and compliance requirements related to the product development lifecycle and other strategic organizational initiatives

Qualification

FedRAMPRMF assessmentTS/SCI clearanceCISACISSPPMPCIPPAudit managementProgram managementCommunicationAttention to detailCross-functional collaboration

Required

5+ years of experience in an equivalent governance, risk & compliance and/or related engineering role

3+ years direct experience with the FedRAMP and RMF assessment and authorization processes

This position requires a TS/SCI with CI POLY security clearance. Applicants must already possess a valid and active TS/SCI with CI POLY security clearance

Preferred

A solid understanding of the FedRAMP Framework and DoD Impact levels IL4, IL5 and IL6

Bachelor's degree or equivalent experience

Experience prioritizing technical changes to a FedRAMP system and apply controls to ensure audit readiness and acceptability

Experience leading system design with engineering to provide technical guidance documentation

Experience designing federal SaaS cloud computing systems including source control management, logging & monitoring systems, FIPS encryption methods, access controls and vulnerability management

Strong communications skills (written and verbal) and attention to detail

Proven program/project management experience (especially audit management)

Ability to lead multiple projects and organize time effectively

Organized, adaptable, and able to gain support and consensus with cross-functional partners

CISA, CISSP, PMP, CIPP or other related certifications