Senior GRC Engineer

About Workstreet

At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of frameworks—including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP—empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the GRC Engineering Team

Our GRC Engineering team is the primary point of contact for Workstreet's clients. We bring deep framework compliance knowledge and program management to each engagement to ensure our clients' compliance goals are met. Our teammates are trusted advisors not only in the compliance space, but also operationally in the role of vCISO.  We deliver quickly using common templates and methodologies and are adept at creative problem-solving. GRC Engineering Team members also listen for and serve as a centralized resource, advising clients on Workstreet's other service offerings to support their compliance, privacy, and information security goals.

The Opportunity

We are seeking a highly motivated, client-focused Senior GRC Engineer to join our fast-growing team. The ideal candidate is a seasoned client relationship manager who brings deep expertise in cybersecurity compliance and a proven track record of leading high-complexity client engagements with professionalism and care. This role is first and foremost about delivering an exceptional client experience — managing accounts, building trust, and driving successful outcomes — while overseeing a pod of analysts and applying expertise across frameworks such as SOC 2, ISO 27001, and NIST CSF.

The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 15 days. You will serve as the primary point of contact for a portfolio of clients, leading engagements end-to-end, managing escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.

What You'll Do

Own the client experience for complex accounts - serve as the dedicated primary point of contact for a portfolio of high-complexity, long-term client accounts, ensuring consistent delivery, proactive communication, and strong relationships at every stage.

Lead client engagements through key milestones - conduct regular client meetings, deliver progress updates, set clear expectations, and guide clients through audits, assessments, and compliance milestones with clarity and confidence.

Communicate directly with U.S.-based stakeholders - engage directly with U.S. clients via phone, email, and text to address compliance concerns, provide expert guidance, and ensure clients feel supported and informed.

Handle escalations with a solution-oriented approach - resolve complex client issues swiftly and professionally, applying a composed approach that reinforces client trust and satisfaction.

Act as a trusted compliance advisor - build long-term relationships by understanding each client's unique business context and delivering practical, relevant, and actionable compliance guidance.

Manage and develop a pod of junior analysts - provide day-to-day direction, constructive feedback, and professional development support to a small team of analysts, fostering a high-performance culture.

Drive team delivery and accountability - ensure the pod delivers high-quality work on time across all active client engagements, stepping in to support and coach where needed.

Interpret and apply complex regulatory frameworks - analyze and execute cybersecurity compliance requirements under SOC 2, ISO 27001, HIPAA, NIST CSF, and related standards.

Lead multi-threaded compliance projects - oversee multiple client engagements simultaneously, including audits, evidence collection, control mapping, due diligence, and incident response activities.

Develop robust compliance documentation - create, implement, and maintain cybersecurity policies, procedures, and supporting evidence to meet audit and certification objectives.

Collaborate on risk management and process improvement - work with internal and external teams to mitigate cybersecurity risks while continually refining standard operating procedures, playbooks, and frameworks.

Who You Are

Demonstrated client relationship management - you're comfortable owning client engagements, navigating difficult conversations, and serving as the primary point of contact throughout the engagement.

Exceptional professionalism and communication - you communicate confidently and professionally in all client interactions, with outstanding written and verbal English skills.

Proven people leadership experience - you bring 3+ years of experience managing or leading a small team, pod, or squad, providing coaching, mentorship, and accountability while fostering a collaborative, high-performing environment.

Hands-on cybersecurity compliance expertise - you have 3+ years of practical experience working with cybersecurity compliance frameworks such as SOC 2, ISO 27001, and/or NIST CSF, helping organizations implement and maintain effective compliance programs.