Senior Corporate Counsel managing Workday’s Cybersecurity Legal Program. Overseeing legal strategy in alignment with global cybersecurity laws and regulations, while supporting network and product security.
Responsibilities
Manage and further develop Workday's Cybersecurity legal program.
Provide cybersecurity legal expertise and guidance to executives, cross-functional leaders, and other relevant partners on variety of issues, including data security, incident response, risk mitigation, and relevant cybersecurity and data protection laws, regulations, and requirements.
Provide dedicated legal support and counsel to the Chief Information Security Officer and the Cybersecurity and Trust organization.
Lead the legal response of the investigation of potential security and privacy incidents and vulnerabilities, including identifying any legal or regulatory obligations, drafting and reviewing relevant communications and notifications, and providing counsel on Workday’s response, remediation, and mitigation efforts.
Partner with Workday's Cybersecurity and Trust organization on the development and implementation of various cybersecurity programs, initiatives, training, and exercises, including cybersecurity awareness programs, bug bounty programs, penetration testing, phishing simulations, tabletops, and red-team exercises.
Develop, maintain, and improve cybersecurity legal processes and procedures, including Workday’s cybersecurity incident response plan, and advise on other relevant policies, procedures, playbooks, and standards.
Partner with cross-functional teams to draft, review, and ensure compliance with security terms in customer, vendor, and partner contracts.
Monitor, analyze, and advise on compliance with global and domestic cybersecurity and data security laws, regulations, industry standards, and certifications.
Advise on responses to external inquiries regarding Workday’s information security practices and procedures.
Provide legal support to Workday’s Corporate Affairs team in formulating and advocating the company’s policy positions on cybersecurity matters.
Collaborate with internal teams on cross-functional projects related to a wide-range of cybersecurity issues that touch upon privacy, data security, product development, public policy, and compliance.
Handle outside counsel relationships, including strategy, work product, and budget.
Requirements
J.D. Degree and membership in at least 1 state bar in good standing
7+ years of experience as a practicing attorney, including 3+ years of cybersecurity experience at a national law firm, governmental agency, or in-house.
In-house experience at a global SaaS company is a plus.
Experience building cybersecurity programs and working with Information Security teams.
Expertise in global security, privacy, and regulatory frameworks.
Experience with SaaS, web technologies, cloud technologies/platforms.
Outstanding verbal and written communication skills, including the ability to quickly translate complex and technical cybersecurity issues into clear guidance and to effectively communicate with non-legal collaborators.
Ability to remain calm and lead in high-pressure, time-sensitive, crisis situations.
Strong ability to influence, advise, and advocate for the business’ interests.
Exercises outstanding judgment and integrity and in tune with complex needs of the business to counsel clients in an effective and creative manner.
Nurtures internal and external relationships and leads project collaboration with cross-functional networks.
Consistently applies strategic focus, critical thinking and problem solving by appropriately weighing legal risks and business objectives.
Anticipates, identifies and analyzes legal risks and exercises exceptional judgment and effective processes to drive solutions without guidance.
Proactively seeks out and leads legal projects and initiatives using strong interpersonal and project management skills; efficiently drives and leads process improvements using best practices .
Drives creative solutions, builds efficient processes and makes sound decisions; not afraid to challenge the status quo or identify and drive change.
Juriste au sein de ADEO, leader international du secteur retail. Accompagnement des projets structurant et stratégique, en lien avec les Dirigeants et Responsables RH.
Legal Counsel for SaaS business supporting North American operations. Involves contract negotiation, advising on privacy laws, and collaborating across teams.
Legal Counsel providing guidance on corporate and commercial matters in the MENA region. Advising on legal compliance, risk management, and data protection laws.
Juriste en Droit Social at Jellyfish, supporting HR compliance with French labor law and documentation. Collaborating with HR teams on legal matters related to employment and contracts.
Lawyer specialized in labor law working in Eschborn or Stuttgart, providing legal advice in all areas of employment law and representing clients in labor court.
Junior lawyer in public law, handling clients in regulated sectors at Cordeiro, Lima e Advogados. Involves contract management, bidding processes, and legal advisory services.
Advogado(a) Pleno em Contencioso Estratégico em Direito Administrativo no escritório em Curitiba. Envolver - se em processos judiciais e oferecer consultoria jurídica aos clientes.
Data Privacy Counsel at Montu UK leading privacy compliance frameworks. Collaborating with cross - functional teams to ensure robust data protection and patient trust in a digital health setting.
Claims Legal Counsel providing legal support and handling litigation for property and commercial claims. Collaborating with the specialty lines legal team for Desjardins Insurance.