Senior Manager, CyberSecurity GRC

Your work days are brighter here.

We're obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we're shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you'll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We're in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you'll do meaningful work with Workmates who've got your back. In return, we'll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you've found a match in Workday, and we hope to be a match for you too.

About the Team

Workday's Cybersecurity GRC team is the guardian of customer trust. We are responsible for building and managing programs designed to protect the confidentiality, integrity, and availability (CIA) of our customers most sensitive data. We ensure that company practices, policies, and processes are performed in accordance with contractual and regulatory requirements and Workday's core values, and help represent these practices to our customers.

We act as strategic partners that fuel Workday's growth while maintaining unwavering protection of our data and infrastructure. Joining our team means directly contributing to the security posture of a global SaaS leader. If you're driven by a passion for safeguarding millions of customers data and eager to innovate compliance programs at scale, this is your opportunity to be part of a top-priority initiative.

About the Role

We are looking for an experienced Cybersecurity GRC leader to spearhead our local team and act as a key representative for the cGRC organization, within Workday Cybersecurity & Trust. You should have experience managing, leading high-performing teams, providing Go-to-market security support within a fast-paced SaaS environment, managing complex audit cycles, and working with cybersecurity risks.

The successful candidate will have a demonstrated ability to manage a complex team, project manage audits and certifications, and manage separate workstreams like security questionnaires, customer calls, and security risk assessments. This will require you to work effectively within your own team but also to coordinate with others in teams both locally and in other time zones, including external consultant resources across the cGRC organization.

You will be:

• Driving: The execution of Workday's Cybersecurity GRC programs, acting as a pilot lead to build audit project plans, coordinate with key control owners, and liaison with third-party audit firms.
• Delivering: Critical Go-To-Market (GTM) support activities, including managing and working with security inquiries/questionnaires, overseeing customer-facing communications, and delivering audit programs.
• Leading: A local team of GRC professionals and consultant resources, providing mentorship, guidance, and serving as a member of Workday's cGRC extended leadership team.

About You

Basic Qualifications

• 15+ years of total experience with Bachelor's Degree in Computer Science, Information Systems, or related field (or equivalent experience).
• 10+ years of experience in Security Compliance, Risk Management, or IT Audit, with at least 4 years in a people leadership or management role.
• Strong proficiency in industry compliance standards, specifically SOC1 (SSAE18), SOC2, and ISO27001.
• Solid understanding of Cloud Computing and Software as a Service (SaaS) operational models, particularly regarding risk frameworks and security controls.
• Excellent problem-solving skills and a proven ability to manage multiple complex projects simultaneously while maintaining high attention to detail.
• Strong verbal and written communication skills for global team interaction and customer-facing engagements.

Other Qualifications:

• Familiarity with managing external auditors and coordinating resource planning across global matrixes organisations.
• Experience with customer support or GTM enablement, specifically in articulating security postures to external stakeholders.
• Professional certifications such as CISA, CISM, CISSP, or CRISC are highly preferred.

Our Approach to Flexible Work

With Flex Work, we're combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote home office roles also have the opportunity to come together in our offices for important moments that matter.

Are you being referred to one of our roles If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates privacy and data security. Workday will never ask candidates to apply to jobs through websites that are not Workday Careers.

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.