Compliance System Owner (US Federal)

Position Overview

• Location Type: [Not Specified]
• Job Type: Full Time
• Salary: [Not Specified]

At Workday, our culture is driven by our value of putting our people first. We believe a healthy employee-centric, collaborative culture is essential for success. We look after our people, communities, and the planet while remaining profitable. We encourage you to shine and bring your brightest self to work.

Workday values candidate privacy and data security. We will never ask candidates to apply to jobs through websites other than Workday Careers, nor will we ask for payment for recruiting services.

About the Team

Join Workday's Product & Compliance team, focused on our Government Industry Vertical within the Product & Technology Organization. Our mission is to accelerate the adoption and success of Workday solutions within government agencies by fostering seamless teamwork across product development, compliance, and go-to-market teams. Our charter includes compliance with Federal security standards (e.g., FedRAMP - IL2/IL4, Secret, Top Secret), Federal OPM mandates, and specific requirements for Payroll, Benefits, Workforce Management, and Financials for the Federal Government. We aim to maintain both near-term and long-term views of the business while monitoring evolutions in the Federal business landscape.

About the Role

Workday is seeking a highly motivated and proactive Security and Compliance Architect to join our dedicated Product & Compliance team within the Government Industry Vertical. You will be a key partner to our product teams (HCM and Financials), expertly navigating compliance requirements (e.g., FedRAMP, IL4, IL5, Secret, Top Secret) with a deep understanding of NIST 800-53.

Key Responsibilities

• Security Engineering: Collaborate with engineering teams to ensure systems are architected, implemented, and operated in compliance with relevant security standards, including FedRAMP/FISMA High, DoD IL-4/5, NIST 800-53 R5, ISO 27000, and others.
• Compliance Engineering: Establish baseline engineering requirements for compliance to build secure solutions for Government Cloud environments.
• Risk & Audit Management: Develop a Risk Management strategy, coordinating with external assessors and advisory firms for security audits and risk assessments. Supervise mitigation plans and ensure timely remediation of risks.
• GRC Oversight: Establish and govern a common controls strategy to ensure security and compliance across Workday’s environments with relevant internal and external security frameworks.
• Collaborator Collaboration: Partner with cross-functional teams, including product security, engineering, legal, and external regulatory bodies, to align compliance initiatives with business objectives.
• Build and Maintain External Partnerships: Maintain and lead partnerships with customer US Federal G... [Content truncated]