GRC Engineer (NIST)

Federal compliance practitioner - bring 2+ years of direct experience executing GRC deliverables across NIST SP 800-53, FedRAMP, or NIST Risk Management Framework (RMF) lifecycles.

Federal artifact author - hands-on execution experience creating, evaluating, and maintaining System Security Plans (SSPs), POA&Ms, and technical security narratives.

Multi-project GRC operator - highly organized practitioner with demonstrated ability to manage multiple federal compliance project tasks simultaneously without losing detail.

Sovereign cloud environment navigator - familiar with cloud service providers (CSPs) and secure configurations in government clouds like AWS GovCloud or Azure Government.

Effective client communicator - possesses strong written and verbal English communication skills suited for direct engagement with U.S. client technical leads and assessors.

High-velocity startup operator - thrives in dynamic consulting environments, demonstrating high initiative, adaptability, and an eagerness to take task ownership.

Active security credentials - hold recognized professional designations such as CGRC, CAP, CISSP, or CompTIA Security+.

Direct ATO or 3PAO execution - practical history supporting live agency Authority to Operate (ATO) certifications or working directly alongside 3PAO assessment teams.

Continuous monitoring experience - familiar with executing automated or manual FedRAMP Continuous Monitoring (ConMon) workflows.

Defense framework exposure - complementary exposure to CMMC 2.0 or NIST SP 800-171 baselines for defense industrial base contractors.

Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.

A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.

Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.

Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.

Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.

Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.

Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.

Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

All employment is decided on the basis of qualifications, merit, and business need. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, Title I of the Americans with Disabilities Act of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact accommodationsus@workstreet.com

About Workstreet

At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.