Senior GRC Engineer

🕒 Julho 16

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 46%

O que significa: quão provável esta vaga está aberta sem contratação ativa.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Configurar Alerta de Email para Novas Vagas

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo

Workstreet

SiteLinkedInTodas as Vagas

11 - 50 funcionários

Fundada em 2023

🔒 Cibersegurança

📋 Conformidade

🤝 B2B

Cybersecurity • Compliance • B2B

A Workstreet é um provedor de serviços gerenciados de segurança e conformidade que ajuda empresas a automatizar e modernizar seus programas de segurança. Com expertise em frameworks de conformidade como SOC 2, ISO 27001, HIPAA e GDPR, a Workstreet ajuda empresas a alcançar seus objetivos de segurança e compliance com eficiência. Seus serviços incluem atuação como CISO virtual (vCISO), pentests de ponta a ponta e gestão de riscos de fornecedores, com o objetivo de simplificar os processos de segurança enquanto as empresas focam no crescimento.

Descrição

• Client Relationship Management (Primary Focus) Own the Client Experience: Serve as the dedicated primary contact for a portfolio of high-complexity, long-term client accounts, ensuring consistent delivery, proactive communication, and strong relationships at every stage of the engagement. • Lead Client Engagements: Conduct regular client meetings, deliver progress updates, set expectations, and guide clients through audits, assessments, and compliance milestones with clarity and confidence. • Communicate with Care: Engage directly with U.S.-based clients via phone, email, and text to address compliance concerns, provide expert guidance, and ensure clients always feel supported and informed. • Handle Escalations: Resolve complex client issues swiftly and professionally, applying a solution-oriented approach that reinforces client trust and satisfaction. • Be a Trusted Advisor: Build long-term relationships by understanding each client's unique business context and delivering compliance guidance that is practical, relevant, and actionable. • Team Leadership Manage and Develop a Pod of Analysts: Provide day-to-day direction, constructive feedback, and professional development support to a small team of junior analysts, fostering a high-performance and collaborative culture. • Drive Accountability: Ensure the pod delivers high-quality work on time across all active client engagements, stepping in to support and coach where needed. • GRC & Compliance Execution Interpret Regulatory Frameworks: Analyze and apply cybersecurity compliance requirements under SOC 2, ISO 27001, HIPAA, NIST CSF, and related standards. • Lead Compliance Projects: Oversee multiple client engagements simultaneously, including audits, evidence collection, control mapping, and due diligence or incident response activities. • Develop Compliance Programs: Create, implement, and maintain cybersecurity policies, procedures, and supporting documentation to meet audit and certification objectives. • Collaborate on Risk Management: Work with internal and external teams to identify, assess, and mitigate cybersecurity and compliance risks. • Drive Process Improvement: Enhance standard operating procedures, playbooks, and compliance frameworks to strengthen operational effectiveness.

🎯 Requisitos

• Demonstrated client relationship management - you're comfortable owning client engagements, navigating difficult conversations, and serving as the primary point of contact throughout the engagement. • Exceptional professionalism and communication - you communicate confidently and professionally in all client interactions, with outstanding written and verbal English skills. • Proven people leadership experience - you bring 3+ years of experience managing or leading a small team, pod, or squad, providing coaching, mentorship, and accountability while fostering a collaborative, high-performing environment. • Hands-on cybersecurity compliance expertise - you have 3+ years of practical experience working with cybersecurity compliance frameworks such as SOC 2, ISO 27001, and/or NIST CSF, helping organizations implement and maintain effective compliance programs. • Strong project management skills - you can successfully manage multiple compliance engagements simultaneously, balancing competing priorities while maintaining exceptional quality and client satisfaction. • Highly organized and adaptable - you thrive in fast-paced startup environments, staying organized, proactive, and flexible as priorities evolve. • Policy development and governance - you're experienced in creating, maintaining, and enforcing cybersecurity policies that align with regulatory requirements and industry best practices. • Experience in a cybersecurity-focused technology company - you've worked within a technology organization where security and compliance are core to the business, collaborating closely with technical, operational, and cross-functional teams. • Big 4 advisory or assurance tenure – Prior success directing complex IT compliance audits, data governance assessments, or technical risk advisory workflows inside elite environments like Deloitte, PwC, EY, or KPMG. • Multi-framework compliance command – Advanced familiarity with specialized, adjacent international frameworks and regulatory bodies, explicitly including HIPAA, PCI DSS, or regional data sovereignty baselines. • Mastery of compliance automation architectures – Direct backend operational mastery navigating, configuring, and tracking continuous evidence collection inside automated platforms like Vanta. • Validated industry credentials – Hold active, globally recognized professional security and audit designations such as CISA, CISSP, ISO 27001 Lead Implementer, or CompTIA Security+. • Advanced audit coordination background – Proven history managing full-lifecycle third-party assessments, audit pathways, and independent examiner walkthroughs.

🏖️ Benefícios

• Career Development : Clear path with mentorship and training opportunities • Technical Training : Comprehensive onboarding on security and compliance frameworks • Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities. • Growth Opportunity : Early-stage company with significant room for career advancement. • Remote-First Culture : Flexibility to work from anywhere while collaborating with a global team. • Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.