Sr. Principal, GRC
Boulder, CO · HybridJobSeen 5 days agoSeen in employer's feed 5 days ago
Most applications go out cold — see where you stand first. No sign-up to start.
Watch jobs like this. New roles like this one near Boulder, CO, by email.
Don't just apply. Show up ready.
Olive works from this exact posting.
At a glance
Olive lists jobs from US employers, including remote roles you can work from the United States.
Job overview
The Sr. Principal, GRC will lead and execute cybersecurity governance, risk, and compliance initiatives at Workday. The role develops compliance frameworks and supports public-sector offerings through certifications, monitoring, and stakeholder alignment. It also advises on global compliance programs, evaluates GRC automation and AI opportunities, and integrates cybersecurity controls into software development processes. The position reports to Workday’s Boulder office and may allow partial telecommuting.
Skills & qualifications
Skills
Full job description
Contribute to Workday's cybersecurity compliance posture by leading and executing critical Cybersecurity Governance, Risk, and Compliance (cGRC) initiatives. Develop and maintain cybersecurity compliance frameworks, policies, and procedures to ensure adherence to global regulatory compliance requirements, particularly Network and Information Security Directive (NIS2), Digital Operational Resilience Act (DORA), Security of Critical Infrastructure Act (SOCI), Cybersecurity Resilience Act (CRA). Enable and maintain Workday's Public Sector offerings through certifications, continuous monitoring, consultation and deep stakeholder alignment. Act as a trusted advisor across Workday to help maintain and enhance customer's trust through various global compliance programs including UK Public Sector Procurement Frameworks (G-Cloud and Back Office Software frameworks) and cybersecurity certification schemes like BSI C5 (Germany), IRAP (Australia), ENS (Spain). Conduct strategic analysis of Workday's control and technical landscape to identify automation opportunities for the GRC team, evaluate the potential of AI-driven efficiencies, and assess the ROI of GRC automation tools like OneTrust and TrustCloud. As part of the Shift-Left initiative, leverage a deep understanding of Workday's SDLC, LaunchPad and Secure Development Engagement Lifecycle processes to integrate cybersecurity control requirements, ensuring streamlined audit readiness and driving process optimization. Position reports to the Workday Boulder, CO office. May allow partial telecommuting. Workday pay ranges vary based on work location and recruiters can share more during the hiring process. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Each candidate's compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, future potential and internal pay parity. For more information regarding Workday's comprehensive benefits, please go to workday.com/en-us/company/careers/life-at-workday.html Interested candidates must apply at https://bit.ly/workday-jobs Please reference job JR-0108532
Similar jobs, posted recently
Open roles like this one, listed in the last 30 days.
Principal Security Compliance SpecialistAkamai Technologies, Inc. · Denver, CO (Flexible) · $132–238K/yr
Senior Commercial Compliance AnalystRubrik · Denver, CO · $135–203K/yr
Senior GRC Information Security Systems AnalystDorsey & Whitney LLP · Denver, CO
Regulatory Risk & Compliance Specialist IVOracle · Denver, CO · $91–187K/yr
Senior Cyber Risk AnalystMaxar Intelligence I · Westminster, CO (Hybrid) · $105–140K/yr
You've read the whole posting — now see how you match it.