GRC Engineer (Special Programs)

Direct client engagement operator - proven ability to communicate directly with U.S. clients, maintaining professionalism and executive care across all touchpoints.

Multi-project GRC operator - bring strong organizational discipline to manage multiple cybersecurity compliance engagements simultaneously without losing velocity.

Technical compliance practitioner - hands-on execution experience across SOC 2, ISO 27001, or NIST CSF frameworks within tech-focused cybersecurity environments.

Policy lifecycle architect - practical familiarity authoring, rolling out, and enforcing enterprise cybersecurity policies and control benchmarks.

High-velocity startup operator - thrives in fast-paced startup settings, adapting quickly to shifting priorities and dynamic client challenges.

Exceptional technical communicator - possesses outstanding written and verbal English communication skills suited for executive and technical interactions.

Compliance automation platform mastery - practical exposure utilizing automated compliance solutions such as Vanta or similar GRC platforms.

Expanded regulatory framework knowledge - practical familiarity with additional regulatory frameworks including GDPR, HIPAA, or PCI DSS.

Active industry certifications - credentialed practitioner holding recognized certifications such as ISO 27001 Lead Implementer, CISA, or Security+.

Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.

A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.

Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET) to effectively collaborate with team members, stakeholders, and cross-functional partners while ensuring timely communication and support.

Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.

Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.

Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.

Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.

At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.