Sr Principal, GRC

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

• Minimum of 12 years experience as a GRC or business leader, conceiving and implementing innovative GRC strategies, driving improvements in risk management and compliance effectiveness, and influencing overall organizational governance.
• Minimum of 10+ experience in GRC domains, regulatory landscapes, and GRC technologies.
• Bachelor’s degree in a relevant discipline such as Business Administration, Law, Finance, Information Security, or a related discipline; a Master's degree preferred or equivalent practical experience.

• Proven ability to strategically and proactively apply Prioritization techniques to lead and direct the organization's most critical and complex GRC or Cybersecurity initiatives, anticipating future challenges and aligning with executive vision.
• Experience with driving cross-functional cybersecurity alignment across a global workforce and lead by influence across departmental lines without direct authority.
• Proven experience building, implementing, and running programs from scratch within an enterprise environment.
• Exceptional written and verbal communication skills under intense pressure, with the ability to translate complex technical risks for non-technical executives.
• Exceptional mastery in Relationship Building and the ability to cultivate and leverage deep, influential relationships with executive leadership, the board of directors, and key external stakeholders to advance Cybersecurity objectives.
• Expert-level understanding of Risk Analysis methodologies.
• Exceptional mastery in Stakeholder Management and the ability to build unshakeable consensus and influence executive leadership, the board of directors, and key external partners on the organization's most critical GRC strategies and initiatives.
• Experience leading cybersecurity technical and transformation programs in collaboration with cross functional cybersecurity teams, including experience being hands on with cybersecurity telemetry and metrics to support design and program progress indicators
• Experience writing, evaluating and remediating Internal Audit reports and driving technical remediation to closure.
• Experience analyzing technical cybersecurity data, such as vulnerability management SLA results by functional team, and using this data for strategic decision making purposes.
• Exceptional written and verbal communication skills under intense pressure, with the ability to translate complex technical risks for non-technical executives and working closely with technical leaders and executives across product, technology, cybersecurity and legal.

• Experience handling interpersonal relationships and highly confidential matters with a high degree of self-awareness and discretion.

The annualized base salary ranges for the primary location and any additional locations are listed below.  Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workday’s comprehensive benefits, please click here.

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.