Workstreet
11 - 50 employees
Founded 2023
🔒 Cybersecurity
📋 Compliance
🤝 B2B
Cybersecurity • Compliance • B2B
Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.
Senior GRC Engineer – Special Programs
🕒 October 7
Where this job comes from
Posted on Workstreet's careers page, not through a job board
First seen by Remote Rocketship October 7
Still open on Workstreet's site. Checked 15 minutes ago.
Workstreet
11 - 50 employees
Founded 2023
🔒 Cybersecurity
📋 Compliance
🤝 B2B
Cybersecurity • Compliance • B2B
Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.
📋 Description
• Own primary account relationship management for complex, long-term client accounts • Drive proactive communication, milestone updates, and executive trust • Lead client kickoff meetings and milestone review meetings for yourself and your team • Guide clients through audits, risk assessments, evidence collection, and milestone reviews • Resolve high-stakes client escalations professionally and support long-term client retention • Provide daily operational leadership, feedback, and mentorship to junior analyst pods • Analyze, interpret, and implement technical security controls aligned with SOC 2, ISO 27001, HIPAA, and NIST CSF • Design, roll out, and maintain enterprise cybersecurity policies, procedures, and documentation • Refine internal playbooks, standard operating procedures, and delivery frameworks • Manage active client accounts within the first 15 days • Deliver specialized compliance services for organizations across industries
🎯 Requirements
• 3+ years of experience directing small analyst pods • 3+ years of direct cybersecurity compliance experience with practical execution across SOC 2, ISO 27001, or NIST CSF frameworks • Direct experience owning high-complexity accounts, facilitating difficult conversations, and serving as the primary face of technical engagements • Demonstrated ability to manage multiple complex compliance projects simultaneously • Skilled at creating, implementing, and enforcing corporate security policies • Exceptional written and verbal English communication skills • Experience with SOC 2, ISO 27001, or NIST CSF frameworks • Big 4 or top-tier consulting experience is helpful • Exposure to HIPAA, PCI DSS, or complementary regulatory compliance frameworks is helpful • Hands-on proficiency with Vanta, Drata, or similar automated GRC platforms is helpful • Recognized certifications such as CISA, CISSP, ISO 27001 Lead Implementer, or Security+ are helpful • Experience leading external audits, third-party risk assessments, and auditor evaluations is helpful • Reliable, high-speed internet connection and professional home office environment • Availability to work 8:00 AM–5:00 PM U.S. Eastern Time • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding • Employment contingent upon identity verification and background screening, where permitted by law • Must be authorized to work in the U.S. without visa sponsorship now or in the future
🏖️ Benefits
• Career development with mentorship and training opportunities • Reimbursement for approved training and certification courses relevant to the current role • Competitive base salary • Regular performance reviews linked to merit-based appraisals • Bonus opportunities • Significant room for career advancement • Remote-first flexibility to work from anywhere while collaborating with a global team
Apply Now📊 Check your resume score for this job
Improve your chances of getting an interview by checking your resume score before you apply.
Similar Jobs
🕒 October 6
Senior Compliance & Audit Manager scaling compliance for mpathic’s trustworthy AI infrastructure. Owning audits, FDA Part 11 validation, ISO certifications, and AI governance.
🕒 October 6
Senior regulatory affairs manager advancing U.S. IND/NDA and global CTA/MAA submissions. Supporting Braveheart Bio’s cardiovascular drug development strategy and health authority interactions.
🕒 October 6
Senior Compliance Analyst overseeing individual disability and supplemental health insurance compliance at The Standard. Interpreting regulations, managing filings, assessing risk, and advising cross-functional teams.
🕒 October 6
Trade Compliance Analyst auditing imports and managing customs compliance for Spreetail’s ecommerce logistics and fulfillment operations. Building data tools to reduce duty overspend and improve global trade accuracy.
🕒 October 6
Remote laboratory compliance coordinator ensuring CLIA compliance, quality control, and staff competency for Silver Cross Medical Groups. Reviewing testing procedures, proficiency results, and regulatory records.
