Senior Director of BT Risk Management, Workday
$240.3-360.5k
More information about location
Office located in Pleasanton, CA
Enterprise AI platform for managing HR and finance
Job no longer available
Enterprise AI platform for managing HR and finance
1001+ employees
Job no longer available
$240.3-360.5k
More information about location
Office located in Pleasanton, CA
1001+ employees
Company mission
To leverage the power of AI to elevate humans and supercharge work, moving business forever forward.
Role
Who you are
- 10+ years of experience in IT risk management, information security, or a related Governance, Risk, and Compliance (GRC) field
- 5+ years of experience in Risk Management in leadership and management roles
- 10+ years in design, implementation, and development in comprehensive IT risk management programs
- Deep knowledge of cyber security governance frameworks (e.g., NIST, ISO 27001, COBIT) and a track record of implementing effective security policies, procedures, and controls
- Demonstrated knowledge of information security principles and the ability to conduct security risk assessments, perform root cause analysis, and ensure compliance with regulatory frameworks such as SOX, HIPAA, and PCI DSS
- Exceptional communication skills with a proven ability to build and nurture relationships with diverse stakeholders, including business leaders and technical teams
- Skilled at articulating complex technical risks to both technical and non-technical audiences and influencing change across the organization
- Demonstrated ability to translate a strategic vision into a concrete plan, prioritizing tasks and resources based on urgency and business impact to ensure effective and efficient execution
- Track record of acting as a thought leader in the technology or security space, including presenting at industry events, publishing articles, or influencing key industry trends
- Experience in talent development, including mentoring and coaching junior team members and defining the critical skills needed to build a future-ready IT workforce
- Familiarity with the unique risks and governance challenges associated with emerging technologies, particularly Artificial Intelligence and Machine Learning
- Relevant certifications such as CISSP, CISM, or CRISC
What the job involves
- Workday’s Business Technology (BT) organization continues its mission to deliver unparalleled value to our business partners and customers
- To support this mission, the BT Strategy & Operations team is responsible for developing the long-term vision for BT, setting goals and objectives, and ensuring that we have the right plans in place to move with speed at scale
- The team collaborates closely with cross-functional teams, business partners, and executives to understand the needs and priorities of the business, and supports the development of strategies that will help BT meet those needs
- The Sr. Director of BT Risk Management is a critical, new leadership role responsible for establishing and maturing a comprehensive risk management program within Workday's Business Technology (BT) organization
- This role is a cornerstone of the larger BT Transformation initiative, aiming to drive consistency, clarity, and efficiency
- You will report to the VP, BT Strategy & Operations and be a core member of the leadership team
- The primary mission is to evolve BT from a reactive to a proactive and strategic risk-aware organization
- This will be achieved by clarifying roles and responsibilities, creating a standardized framework, and improving the visibility of operational risks across the enterprise
- Program Leadership & Strategic Direction: Formally establish and lead a comprehensive risk management program for the BT organization. This includes the design and implementation of a federated Governance, Risk, and Compliance (GRC) model, establishing an advisory group to define and propagate standards, tools, and practices
- Policy and Controls Management: Develop, implement, and monitor adherence to policies, procedures, controls, and training/awareness campaigns to ensure the protection of Workday systems and data, and to improve our overall security posture
- Risk Assessment & Mitigation: Lead a standardized, comprehensive framework for identifying, assessing, and mitigating IT risks. This involves conducting security risk assessments, performing root cause analysis, and collaborating with internal teams to identify and evaluate risks and to implement procedures to eliminate, mitigate, or accept them
- Compliance & Audit Coordination: Act as the primary liaison for all BT-related compliance and audit activities. You will coordinate and manage information security risk assessments, security compliance audits, cybersecurity and privacy audits, and ensure that processes and controls are operating effectively. You will also coordinate activities during customer, auditor, and regulatory agency inspections
- Regulatory Frameworks: Ensure the BT organization's compliance with critical regulatory and industry-specific frameworks, including SOX, HIPPA, PCI DSS, and various international data privacy laws by establishing and monitoring relevant procedures and controls
- Cross-Functional Partnership: Work closely with leaders across the BT organization and business functions to embed a culture of proactive risk management
- Communication & Reporting: Provide clear, transparent reporting on the BT organization's risk posture to leadership and key stakeholders, ensuring appropriate decisions are made based on the right information
Our take
Workday is a cloud-based software vendor that provides management of workforces and finances. The company uses a single database for workforce management and financial management to offer integration and optimize business intelligence across companies. It has added to the packages and tools it offers over the years, providing analytic options that allow companies to combine third-party data with information collected by Workday.
The company has also grown through acquisitions and partnerships to broaden its capabilities.. Most recently, in 2025 it purchases Sana, an AI-driven enterprise knowledge and learning platform, to create a "new front door for work". This acquisition allows Workday to integrate Sana's AI-powered search, agents, and learning capabilities with its own data and workflows, allowing employees to access information, automate tasks, and complete their day entirely within Workday.
Through a combination of strategic acquisitions and in-house development, WOrkday has built a comprehensive suite of HR, financial, and enterprise tools. By focusing on innovation and AI-driven workflows, the company continues to push productivity and decision-making for organizations worldwide. Building on this track record, Workday is very much positioned for even more growth, reinforcing its status as a leader in shaping the future of work.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Funding (last 2 of 5 rounds)
Oct 2011
$85m
SERIES F
Apr 2009
$75m
SERIES E
Total funding: $215.3m
Company HQ
Pleasanton, CA
Leadership
Aneel Bhusri
(Co-Founder & Executive Chair)Annel began his career at Morgan Stanley as a Corporate Finance Analyst. He then spent nearly 6 years at PeopleSoft as a Senior VP before co-founding Workday in 2005, where he has served as the CEO ever since.
Carl Eschenbach
(CEO)Carl joined Workday in 2022 as Co-CEO, becoming CEO in 2024. He has also been a Partner at Sequoia Capital since 2016. Previously, he spent 14 years at VMware as President and COO and 3 years at Inktomi Corporation as the VP of North America Sales.
Peter Bailis
(CTO)Prior to joining Workday in 2025, People was a VP of Engineering at Google. He also previously founded Sisu Data, where he served as the CEO for over 5 years.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 66 more jobs at Workday