Senior Director of Customer Trust

The Senior Director of Customer Trust leads a critical cross-functional function responsible for building, scaling, and sustaining trust with Workiva's global customer base. This highly visible leadership role blends strategic vision with hands-on execution, overseeing the governance, risk, and compliance (GRC) strategy for Workiva. You'll serve as a senior representative in customer-facing assurance engagements, lead internal and external audit readiness, and drive scalable risk management initiatives that directly impact customer confidence, enterprise growth, and Workiva's reputation.

What You'll Do

GRC Strategy & Execution

• Lead the design and execution of Workiva's global governance, risk, and compliance strategy

• Oversee InfoSec risk management, third-party risk, internal controls, and policy governance

• Own certification readiness and compliance across multiple frameworks: SOC 1/2, ISO 27001, FedRAMP, SOX, and NIST

Customer Trust & Assurance

• Act as a senior-facing representative in security reviews, customer audits, and high-stakes due diligence

• Lead responses to customer security questionnaires, contract redlines, and external audits

• Manage Workiva's Trust Center and other external assurance documentation

Process Improvement & Risk Automation

• Design scalable, automation-friendly workflows to reduce audit fatigue and contract review bottlenecks

• Drive efficiency in third-party risk management, vendor onboarding, and continuous compliance

Cross-Functional Collaboration

• Partner closely with Sales, Legal, Customer Success, Engineering, and IT to align on compliance priorities and customer needs

• Serve as a strategic advisor to executive leadership on emerging risk areas and trust requirements

Team Leadership

• Lead and develop a high-performing team of managers and senior professionals across the Customer Trust function

• Oversee talent development, performance management, hiring, and capacity planning

• Create a strong leadership bench and culture of continuous learning and innovation in risk and compliance

What You'll Bring

Minimum Qualifications

• 12+ years in GRC, cybersecurity compliance, or InfoSec risk fields

• Proven experience in a B2B SaaS environment at scale (preferably $1B+ in revenue or global enterprise presence)

• Deep understanding of compliance frameworks such as SOC 1/2, ISO 27001, FedRAMP, SOX, GDPR and NIST

• Demonstrated success managing external audits and engaging with enterprise customers in regulated industries (e.g., financial services, healthcare)

Preferred Qualifications

• 5-8+ years in a senior leadership role, including supervision of managers

• Familiarity with customer trust platforms such as Whistic, Conveyor, or Vanta

• Strong understanding of data privacy and protection, with experience building compliant systems and processes aligned with global regulations (e.g., GDPR, CCPA)

• Strong track record of designing scalable compliance processes and automation workflows

• Experience balancing transparency and legal risk in public-facing trust communications

• Executive-level presence with exceptional stakeholder communication and negotiation skills

• Adept at driving cross-functional alignment and building influence without authority

• Proven ability to lead, inspire, and scale high-impact team

• Certifications such as CISSP, CISA, CIPP/US, or ISO 27001 Lead Implementer are a strong plus

Working Conditions & Travel Requirements

• Reliable internet access for any period of time working remotely, not in a Workiva office

• Up to 25% travel

How You'll Be Rewarded

A discretionary bonus typically paid annually

Restricted Stock Units granted at time of hire

401(k) match and comprehensive employee benefits package

The salary range represents the low and high end of the salary range for this job in the US. Minimums and maximums may vary based on location. The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and other relevant factors.

Employment decisions are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other protected characteristic.

Workiva is committed to working with and providing reasonable accommodations to applicants with disabilities. To request assistance with the application process, please email talentacquisition@workiva.com.

Workiva employees are required to undergo comprehensive security and privacy training tailored to their roles, ensuring adherence to company policies and regulatory standards.

Workiva supports employees in working where they work best - either from an office or remotely from any location within their country of employment.