Workday

3 days ago

Program Manager, Cybersecurity Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Drive Workday’s third-party risk management (TPRM) program for the Cybersecurity Risk team by leading security risk assessments across the vendor lifecycle. Track control gaps and remediation through closure or formal risk acceptance, monitor high-risk vendors, and support broader cyber risk assessments. Partner with Legal, Procurement, Security, Privacy, and business owners to assess, communicate, and mitigate third-party security issues, while maintaining records and reporting metrics for stakeholders.

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Key Responsibilities

•Conduct security risk assessments for third parties across the full lifecycle, including intake, due diligence, ongoing monitoring, and offboarding.
•Identify, document, track, and drive remediation of control gaps and security risks through remediation, exception, or formal risk acceptance; escalate as needed.
•Monitor critical and high-risk vendors for control changes, risk signals, remediation progress, and compliance concerns.
•Collaborate with Legal, Procurement, Security, Privacy, and business owners to ensure third-party risks are documented, communicated, accepted, or mitigated.
•Maintain accurate third-party records and support metrics, dashboards, and management reporting; assist with broader risk support activities as needed.

Pay and Benefits

Salary: USD 110,100 - 165,100 annually

Equity and Bonus:Equity

Key Requirements

•5+ years of experience in governance, risk, and compliance (GRC), including third-party/vendor risk management.
•2+ years of experience conducting security or third-party risk assessments across the vendor lifecycle.
•Bachelor’s degree in a relevant discipline (Information Security, Computer Science, Risk Management, Business) or equivalent practical experience.
•Solid understanding of third-party/vendor risk management across intake, due diligence, ongoing monitoring, issue remediation, and offboarding.
•Working knowledge of security and risk frameworks such as NIST CSF, ISO 27001, SOC 2, PCI DSS, and SIG.

Experience:5+ yearsGRCThird-party risk management

Education:Bachelor's in Information Security, Computer Science, Risk Management, Business (or related field)

Skills:CommunicationCross-functional collaborationAttention to detailPrioritizationRisk translation

Certifications:CRISCCISACISSPCISM

Tech Stack:NIST CSFISO 27001SOC 2PCI DSSSIGOneTrustArcherServiceNowVantaBitSightSecurityScorecardRiskRecon

Company Brief

Workday

Provides cloud-based enterprise applications for human capital management, financial management, payroll, and analytics. Delivers unified HR and finance software suites to large organizations, enabling workforce planning, talent management, payroll, and financial reporting.

Industry: HR Tech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Pleasanton, United States

Founded: 2005

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Workday

3 days ago

Program Manager, Cybersecurity Risk

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Program & Project Management (PMO)

Key Responsibilities

•Conduct security risk assessments for third parties across the full lifecycle, including intake, due diligence, ongoing monitoring, and offboarding.
•Identify, document, track, and drive remediation of control gaps and security risks through remediation, exception, or formal risk acceptance; escalate as needed.
•Monitor critical and high-risk vendors for control changes, risk signals, remediation progress, and compliance concerns.
•Collaborate with Legal, Procurement, Security, Privacy, and business owners to ensure third-party risks are documented, communicated, accepted, or mitigated.
•Maintain accurate third-party records and support metrics, dashboards, and management reporting; assist with broader risk support activities as needed.

Pay and Benefits

Salary: USD 110,100 - 165,100 annually

Equity and Bonus:Equity

Key Requirements

•5+ years of experience in governance, risk, and compliance (GRC), including third-party/vendor risk management.
•2+ years of experience conducting security or third-party risk assessments across the vendor lifecycle.
•Bachelor’s degree in a relevant discipline (Information Security, Computer Science, Risk Management, Business) or equivalent practical experience.
•Solid understanding of third-party/vendor risk management across intake, due diligence, ongoing monitoring, issue remediation, and offboarding.
•Working knowledge of security and risk frameworks such as NIST CSF, ISO 27001, SOC 2, PCI DSS, and SIG.

Experience:5+ yearsGRCThird-party risk management

Education:Bachelor's in Information Security, Computer Science, Risk Management, Business (or related field)

Skills:CommunicationCross-functional collaborationAttention to detailPrioritizationRisk translation

Certifications:CRISCCISACISSPCISM

Tech Stack:NIST CSFISO 27001SOC 2PCI DSSSIGOneTrustArcherServiceNowVantaBitSightSecurityScorecardRiskRecon

Company Brief

Workday

Industry: HR Tech

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Pleasanton, United States

Founded: 2005

Website LinkedIn