Assistant General Counsel, Cybersecurity Legal

Your work days are brighter here.

At Workday, it all began with a conversation over breakfast. When our founders met at a sunny California diner, they came up with an idea to revolutionize the enterprise software market. And when we began to rise, one thing that really set us apart was our culture. A culture which was driven by our value of putting our people first. And ever since, the happiness, development, and contribution of every Workmate is central to who we are. Our Workmates believe a healthy employee-centric, collaborative culture is the essential mix of ingredients for success in business. That’s why we look after our people, communities and the planet while still being profitable. Feel encouraged to shine, however that manifests: you don’t need to hide who you are. You can feel the energy and the passion, it's what makes us unique. Inspired to make a brighter work day for all and transform with us to the next stage of our growth journey? Bring your brightest version of you and have a brighter work day here.

About the Team

You'll be joining a high-functioning and highly regarded team that covers Litigation and Cybersecurity. The team is composed of experienced professionals who are specialists in their fields. The Cybersecurity Legal team supports Workday’s business by providing oversight of and strategic leadership for a diverse range of cybersecurity legal issues. We play a meaningful role in supporting Workday’s growth, innovation, security, and integrity.

About the Role

We are seeking a dynamic and experienced Assistant General Counsel to manage our global Cybersecurity Legal Program. In this role, you will play a key part in supporting and developing Workday’s ongoing efforts to ensure secure networks and products, and will manage Workday’s cybersecurity legal strategy in alignment with evolving global cybersecurity laws and regulations.  We seek a confident self-starter who can prioritize and balance multiple tasks and responsibilities and who enjoys working in a fast-paced and high-energy environment. 

Essential Duties and Responsibilities

• Manage and further develop Workday's Cybersecurity legal program.

• Provide cybersecurity legal expertise and guidance to executives, cross-functional leaders, and other relevant partners on variety of issues, including data security, incident response, risk mitigation, and relevant cybersecurity and data protection laws, regulations, and requirements.

• Provide dedicated legal support and counsel to the Chief Information Security Officer and the Cybersecurity and Trust organization. 

• Lead the legal response of the investigation of potential security and privacy incidents and vulnerabilities, including identifying any legal or regulatory obligations, drafting and reviewing relevant communications and notifications, and providing counsel on Workday’s response, remediation, and mitigation efforts.

• Partner with Workday's Cybersecurity and Trust organization on the development and implementation of various cybersecurity programs, initiatives, training, and exercises, including cybersecurity awareness programs, bug bounty programs, penetration testing, phishing simulations, tabletops, and red-team exercises.

• Develop, maintain, and improve cybersecurity legal processes and procedures, including Workday’s cybersecurity incident response plan, and advise on other relevant policies, procedures, playbooks, and standards.

• Partner with cross-functional teams to draft, review, and ensure compliance with security terms in customer, vendor, and partner contracts.  

• Monitor, analyze, and advise on compliance with global and domestic cybersecurity and data security laws, regulations, industry standards, and certifications.

• Advise on responses to external inquiries regarding Workday’s information security practices and procedures.

• Provide legal support to Workday’s Corporate Affairs team in formulating and advocating the company’s policy positions on cybersecurity matters. 

• Collaborate with internal teams on cross-functional projects related to a wide-range of cybersecurity issues that touch upon privacy, data security, product development, public policy, and compliance.

• Handle outside counsel relationships, including strategy, work product, and budget. 

About You

Basic Qualifications

• J.D. Degree and membership in at least 1 state bar in good standing

• 12+ years of experience as a practicing attorney, including 5+ years of cybersecurity experience at a national law firm, governmental agency, or in-house

Other Qualifications

• In-house experience at a global SaaS company is a plus.

• Experience building cybersecurity