Sr Principal, GRC

About the Team

Workday Cybersecurity Governance, Risk, Compliance & Trust team builds and sustains trust in Workday's cybersecurity commitments by embedding a cybersecurity-first mindset, delivering cybersecurity assurance and enabling business growth. We act as trusted advisors and change agents across Workday to protect the data of our fellow Workmates and 8000+ customers.

About the Role

We are seeking a technical cybersecurity leader with a proven track record delivering large cross-functional programs from concept to success. You will need to be comfortable leading in a matrixed organization to drive enterprise-wide cybersecurity programs including, but not limited to, the cybersecurity communications program. Additionally, you will be the architect for strategic C&T transformational programs, working with the C&T leadership team, providing strategic leadership, driving process design and transformation, and architecting the development of internal automation and cybersecurity solutions to ensure successful adoption and overall effectiveness of organizational scale and achievement of strategic objectives. Responsibilities: AI-First Operational Transformation Operational Engineering Evolution: Develop and implement the people, process, and technology transformations required to transition functional operations into continuous, data-driven, AI-first engineering programs, including architecting for security data integration and Agentic AI orchestration. Process & Technology Transformation: Refine existing workflows to eliminate bottlenecks, optimize cybersecurity tooling, and ensure the team is focused on high-value risk mitigation, including industrializing security governance and control enforcement by driving the adoption of policy-as-code and secure Infrastructure as Code (IaC) practices at scale. Talent Upskilling: Foster a deep cybersecurity mindset and drive talent upskilling initiatives across the organization to support program adoption. Advanced Metrics: Institute Key Performance Indicators (KPIs) and automated dashboards that measure the effectiveness of our processes, organizational adoption, and the achievement of strategic objectives. AI Security Customer Engagement Work cross-functionally (including but not limited to Legal, GCO, Product, Platform, and Cybersecurity) to design processes and enable tools to drive consistency in Workdays position and response to AI-related prospect and customer questions. Working with security risk, Legal, GCO and industry as well as regulatory partners, identify AI-cybersecurity topics that require positioning statements and drive efforts to secure investment, design and deliver solutions that mitigate evolving AI-security risks. Translate efforts into external facing communications that can be leveraged in the market. Govern talk tracks and supporting materials that reflect the current Workdays positioning on cybersecurity AI topics. Enable Chief Security Advisors and other Workday AI representatives to represent emerging cybersecurity AI topics with clarity and confidence. Operate as a representative of the executive cybersecurity voice - engaging with customers, prospects and industry groups to deliver thought leadership and security knowledge that bolsters Workdays security brand.

About You

Basic Qualifications

• Minimum of 12 years experience as a GRC or business leader, conceiving and implementing innovative GRC strategies, driving improvements in risk management and compliance effectiveness, and influencing overall organizational governance.
• Minimum of 10+ experience in GRC domains, regulatory landscapes, and GRC technologies.
• Bachelors degree in a relevant discipline such as Business Administration, Law, Finance, Information Security, or a related discipline; a Master's degree preferred or equivalent practical experience.

Other Qualifications

• Proven ability to strategically and proactively apply Prioritization techniques to lead and direct the organizations most critical and complex GRC or Cybersecurity initiatives, anticipating future challenges and aligning with executive vision.
• Experience with driving cross-functional cybersecurity alignment across a global workforce and lead by influence across departmental lines without direct authority.
• Proven experience building, implementing, and running programs from scratch within an enterprise environment.
• Exceptional written and verbal communication skills under intense pressure, with the ability to translate complex technical risks for non-technical executives.
• Exceptional mastery in Relationship Building and the ability to cultivate and leverage deep, influential relationships with executive leadership, the board of directors, and key external stakeholders to advance Cybersecurity objectives.
• Expert-level understanding of Risk Analysis methodologies.
• Exceptional mastery in Stakeholder Management and the ability to build unshakeable consensus and influence executive leadership, the board of directors, and key external partners on the organizations most critical GRC strategies and initiatives.
• Experience leading cybersecurity technical and transformation programs in collaboration with cross functional cybersecurity teams, including experience being hands on with cybersecurity telemetry and metrics to support design and program progress indicators
• Experience writing, evaluating and remediating Internal Audit reports and driving technical remediation to closure.
• Experience analyzing technical cybersecurity data, such as vulnerability management SLA results by functional team, and using this data for strategic decision making purposes.
• Exceptional written and verbal communication skills under intense pressure, with the ability to translate complex technical risks for non-technical executives and working closely with technical leaders and executives across product, technology, cybersecurity and legal.

• Experience handling interpersonal relationships and highly confidential matters with a high degree of self-awareness and discretion.

Workday Pay Transparency Statement

The annualized base salary ranges for the primary location and any additional locations are listed below. Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidates compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workdays comprehensive benefits, please .

Primary Location: USA.CA.PleasantonPrimary Location Base Pay Range: $215,500 USD - $323,300 USD

Additional US Location(s) Base Pay Range: $182,000 USD - $323,300 USD

Our Approach to Flexible Work

With Flex Work, were combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means youll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote 4home office4 roles also have the opportunity to come together in our offices for important moments that matter.