Manager, GRC Engineering

October 16

Apply Now

Receive Emails with Similar Jobs

Workstreet

WebsiteLinkedInAll Job Openings

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

📋 Description

• Develop, write, and maintain policies, procedures, and documentation to support compliance with SOC 2, ISO 27001, and related standards. • Lead and manage SOC 2 Type 1 and Type 2 implementation projects across multiple clients. • Implement and monitor technical controls in cloud environments (AWS, GCP, Azure) to ensure security best practices. • Conduct internal security audits and risk assessments, identifying vulnerabilities and recommending improvements. • Collaborate cross-functionally with engineering, operations, and client teams to embed compliance and security processes into day-to-day workflows. • Stay current with regulatory developments, cybersecurity trends, and evolving compliance requirements. • Operate confidently in compliance platforms such as Drata, Vanta, and SecureFrame.

🎯 Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline. • Proven experience in managing compliance programs and working with SOC 2 and ISO 27001 frameworks. • Strong knowledge of cloud infrastructure security across AWS, GCP, and Azure. • Excellent written and verbal communication skills with strong attention to detail. • Self-starter who thrives in a fast-paced, remote-first startup environment. • Analytical, organized, and proactive — with a strong sense of ownership and accountability. • Nice to Have: Professional certifications such as CISA, CISSP, CISM, or ISO 27001 Lead Implementer/Auditor. Experience in delivering security awareness and compliance training programs. Familiarity with additional frameworks and regulations including GDPR, HIPAA, NIST, or FedRAMP. Hands-on experience using compliance automation tools like Drata, Vanta, SecureFrame, or Tugboat Logic.

🏖️ Benefits

• Competitive Compensation: Fair, transparent pay aligned with your experience and impact. • Remote-First Flexibility: Work from anywhere in the world while collaborating with a distributed team. • Career Growth: Opportunity to grow into advanced roles such as vCISO or senior compliance leadership. • Meaningful Work: Partner with innovative, security-driven organizations across industries. • Learning Culture: Continuous exposure to evolving frameworks, technologies, and compliance standards.