Senior Cybersecurity Compliance Program Manager

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

Workday’s Cybersecurity GRC team is the guardian of customer trust. We are responsible for building and managing programs designed to protect the confidentiality, integrity, and availability (CIA) of our customers' most sensitive data. We ensure that company practices, policies, and processes are performed in accordance with contractual and regulatory requirements and Workday’s core values, and help represent these practices to our customers.
We act as strategic partners that fuel Workday's growth while maintaining unwavering protection of our data and infrastructure. Joining our team means directly contributing to the security posture of a global SaaS leader. If you're driven by a passion for safeguarding millions of customers' data and eager to innovate compliance programs at scale, this is your opportunity to be part of a top-priority initiative.

About the Role

About the Role

We are looking for an experienced Cybersecurity GRC leader to act as a key representative for the cGRC organization, within Workday Cybersecurity & Trust. You should have Cybersecurity Compliance experience providing Go-to-market security support within a fast-paced SaaS environment, managing complex security audit cycles, and working with cybersecurity risks.

The successful candidate will have a demonstrated ability to project manage audits and certifications, and manage separate workstreams such as security questionnaires, customer calls, and security risk assessments. This will require you to work effectively within your own team but also to coordinate with others in teams both locally and in other time zones.

About You

About You

Basic Qualifications:

• Minimum of 6-8 years of experience in Security Compliance, Risk Management, or IT Audit

• Strong proficiency in industry compliance standards, specifically SOC1 (SSAE18), SOC2, and ISO27001.

• Solid understanding of Cloud Computing and Software as a Service (SaaS) operational models, particularly regarding risk frameworks and security controls.

• Excellent problem-solving skills and a proven ability to manage multiple complex projects simultaneously while maintaining high attention to detail.

• Strong verbal and written communication skills for global team interaction and customer-facing engagements.

Desired Qualifications:

• Familiarity with managing external auditors and coordinating resource planning across global matrixes organisations.

• Experience with customer support or GTM enablement, specifically in articulating security postures to external stakeholders.

• Professional certifications such as CISA, CISM, CISSP, or CRISC are highly preferred.

Professional and Soft Skills:

• Strong collaboration and communication skills, with the ability to contribute effectively to technical discussions and decisions.

• Proven ability to analyze complex technical security problems and propose pragmatic, business-enabling solutions.

• Excellent written and verbal communication skills, with the ability to articulate complex security and risk implications to both technical and non-technical stakeholders.

• Demonstrates strong ownership of tasks and projects, delivering high-quality work with minimal supervision.

•

Our Approach to Flexible Work
 

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

At Workday, we are committed to providing an accessible and inclusive hiring experience where all candidates can fully demonstrate their skills. If you require assistance or an accommodation at any point, please email [email protected].

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.