Senior Cybersecurity Legal Counsel

Your work days are brighter here.

We’re obsessed with making hard work pay off, for our people, our customers, and the world around us. As a Fortune 500 company and a leading AI platform for managing people, money, and agents, we’re shaping the future of work so teams can reach their potential and focus on what matters most. The minute you join, you’ll feel it. Not just in the products we build, but in how we show up for each other. Our culture is rooted in integrity, empathy, and shared enthusiasm. We’re in this together, tackling big challenges with bold ideas and genuine care. We look for curious minds and courageous collaborators who bring sun-drenched optimism and drive. Whether you're building smarter solutions, supporting customers, or creating a space where everyone belongs, you’ll do meaningful work with Workmates who’ve got your back. In return, we’ll give you the trust to take risks, the tools to grow, the skills to develop and the support of a company invested in you for the long haul. So, if you want to inspire a brighter work day for everyone, including yourself, you’ve found a match in Workday, and we hope to be a match for you too.

About the Team

The Cybersecurity Legal team supports Workday’s business by providing oversight of and strategic leadership for a diverse range of cybersecurity legal issues. We play a meaningful role in supporting Workday’s growth, innovation, security, and integrity. You'll be joining a high-functioning and highly regarded team that covers Litigation and Cybersecurity. The team is composed of experienced professionals who are specialists in their fields.

About the Role

We are seeking a dynamic and experienced Senior Cybersecurity Legal Counsel to manage our global Cybersecurity Legal Program. In this role, you will play a key part in supporting and developing Workday’s ongoing efforts to ensure secure networks and products and will manage Workday’s cybersecurity legal strategy in alignment with evolving global cybersecurity laws and regulations.  We seek a confident self-starter who can prioritize and balance multiple tasks and responsibilities and who enjoys working in a fast-paced and high-energy environment. 

Responsibilities:

• Manage and further develop Workday's Cybersecurity legal program.

• Provide cybersecurity legal expertise and guidance to executives, cross-functional leaders, and other relevant partners on variety of issues, including data security, incident response, risk mitigation, and relevant cybersecurity and data protection laws, regulations, and requirements.

• Provide dedicated legal support and counsel to the Chief Information Security Officer and the Cybersecurity and Trust organization. 

• Lead the legal response of the investigation of potential security and privacy incidents and vulnerabilities, including identifying any legal or regulatory obligations, drafting and reviewing relevant communications and notifications, and providing counsel on Workday’s response, remediation, and mitigation efforts.

• Partner with Workday's Cybersecurity and Trust organization on the development and implementation of various cybersecurity programs, initiatives, training, and exercises, including cybersecurity awareness programs, bug bounty programs, penetration testing, phishing simulations, tabletops, and red-team exercises.

• Develop, maintain, and improve cybersecurity legal processes and procedures, including Workday’s cybersecurity incident response plan, and advise on other relevant policies, procedures, playbooks, and standards.

• Partner with cross-functional teams to draft, review, and ensure compliance with security terms in customer, vendor, and partner contracts.  

• Monitor, analyze, and advise on compliance with global and domestic cybersecurity and data security laws, regulations, industry standards, and certifications.

• Advise on responses to external inquiries regarding Workday’s information security practices and procedures.

• Provide legal support to Workday’s Corporate Affairs team in formulating and advocating the company’s policy positions on cybersecurity matters. 

• Collaborate with internal teams on cross-functional projects related to a wide-range of cybersecurity issues that touch upon privacy, data security, product development, public policy, and compliance.

• Handle outside counsel relationships, including strategy, work product, and budget. 

About You

Required Qualifications:

• J.D. Degree and membership in at least 1 state bar in good standing

• 7+ years of experience as a practicing attorney, including 3+ years of cybersecurity experience at a national law firm, governmental agency, or in-house.

Other Qualifications

• In-house experience at a global SaaS company is a plus.

• Experience building cybersecurity programs and working with Information Security teams.

• Expertise in global security, privacy, and regulatory frameworks.

• Experience with SaaS, web technologies, cloud technologies/platforms.

• Outstanding verbal and written communication skills, including the ability to quickly translate complex and technical cybersecurity issues into clear guidance and to effectively communicate with non-legal collaborators.

• Ability to remain calm and lead in high-pressure, time-sensitive, crisis situations. 

• Strong ability to influence, advise, and advocate for the business’ interests.

• Exercises outstanding judgment and integrity and in tune with complex needs of the business to counsel clients in an effective and creative manner.

• Nurtures internal and external relationships and leads project collaboration with cross-functional networks.

• Consistently applies strategic focus, critical thinking and problem solving by appropriately weighing legal risks and business objectives.

• Anticipates, identifies and analyzes legal risks and exercises exceptional judgment and effective processes to drive solutions without guidance.

• Proactively seeks out and leads legal projects and initiatives using strong interpersonal and project management skills; efficiently drives and leads process improvements using best practices .

• Drives creative solutions, builds efficient processes and makes sound decisions; not afraid to challenge the status quo or identify and drive change.

Workday Pay Transparency Statement

The annualized base salary ranges for the primary location and any additional locations are listed below.  Workday pay ranges vary based on work location. As a part of the total compensation package, this role may be eligible for the Workday Bonus Plan or a role-specific commission/bonus, as well as annual refresh stock grants. Recruiters can share more detail during the hiring process. Each candidate’s compensation offer will be based on multiple factors including, but not limited to, geography, experience, skills, job duties, and business need, among other things. For more information regarding Workday’s comprehensive benefits, please click here.

Primary Location: USA.VA.McLean (Tyson's Corner)

 

Primary Location Base Pay Range: $176,400 USD - $264,600 USD

 

Additional US Location(s) Base Pay Range: $159,600 USD - $283,600 USD

Our Approach to Flexible Work
 

With Flex Work, we’re combining the best of both worlds: in-person time and remote. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. We know that flexibility can take shape in many ways, so rather than a number of required days in-office each week, we simply spend at least half (50%) of our time each quarter in the office or in the field with our customers, prospects, and partners (depending on role). This means you'll have the freedom to create a flexible schedule that caters to your business, team, and personal needs, while being intentional to make the most of time spent together. Those in our remote "home office" roles also have the opportunity to come together in our offices for important moments that matter.

Pursuant to applicable Fair Chance law, Workday will consider for employment qualified applicants with arrest and conviction records.

Workday is an Equal Opportunity Employer including individuals with disabilities and protected veterans.

Are you being referred to one of our roles? If so, ask your connection at Workday about our Employee Referral process!

At Workday, we value our candidates’ privacy and data security.  Workday will never ask candidates to apply to jobs through websites that are not Workday Careers. 

  

Please be aware of sites that may ask for you to input your data in connection with a job posting that appears to be from Workday but is not.

  

In addition, Workday will never ask candidates to pay a recruiting fee, or pay for consulting or coaching services, in order to apply for a job at Workday.