Jobs at Workstreet

Manage vulnerability scanning infrastructure across client environments, analyze scan results, prioritize risks using CVSS and EPSS, validate findings, and coordinate hands-on remediation and patch deployment across AWS, Azure, and GCP. Maintain vulnerability exceptions, map remediation evidence to compliance frameworks, advise client stakeholders, manage project milestones, and communicate technical risk through status reports and executive summaries.

Owns the enablement function within Business Operations by governing customer-facing assets, brand consistency, templates, workflows, training programs, SOPs, internal communications, and targeted customer email campaigns. Partners cross-functionally with Sales, Delivery, Marketing, and People Operations, audits deliverable quality, tracks training effectiveness, and uses revenue tools and AI workflows to improve operational efficiency. The role is remote-first with occasional local travel.

Own brand and design consistency for customer-facing assets, audit deliverable quality, run targeted customer email campaigns, design and track training programs, create SOPs and workflows, govern templates and AI automation, and support high-visibility internal communications across Sales, Marketing, Delivery, and HR.

Own complex client relationships and lead end-to-end cybersecurity compliance engagements across SOC 2, ISO 27001, NIST CSF, HIPAA, and related frameworks. Manage audits, risk assessments, evidence collection, policy development, escalations, and process optimization. Lead and mentor analyst pods while serving as the primary client contact and ensuring successful compliance outcomes.

Leads high-complexity client GRC engagements, owning relationships, compliance milestones, escalations, and audit readiness. Maps environments to SOC 2, ISO 27001, HIPAA, and NIST frameworks; develops policies and control documentation; advises executives on cybersecurity risk; and supervises and mentors junior analysts. The role also drives process improvements, manages multiple client portfolios, and coordinates third-party assessments.

Supports cybersecurity compliance programs across SOC 2, ISO 27001, NIST, and related frameworks. Responsibilities include maintaining policies and audit evidence, tracking security risks and remediation, coordinating compliance projects, conducting control testing and readiness reviews, and communicating directly with clients. The role partners with IT, engineering, and operations teams while developing compliance documentation, templates, and operational playbooks under senior guidance.

Reviews and validates compliance evidence in GRC platforms, conducts internal audits and readiness assessments, identifies control gaps, recommends remediation, and communicates audit timelines and outcomes. The role requires translating information security and privacy frameworks into technical controls, managing multiple compliance initiatives, analyzing audit evidence, and collaborating with engineering, customer success, GRC consultants, and leadership.

Reviews and validates compliance evidence in GRC platforms, conducts internal audits and readiness assessments, identifies control gaps, recommends remediation, and communicates audit timelines and outcomes. The role focuses on information security and compliance frameworks including ISO 27001, ISO 42001, HIPAA, GDPR, SOC 2, and NIST. It requires coordinating multiple compliance initiatives, analyzing technical evidence, and collaborating with engineering, customer success, and leadership teams.

Manage client cybersecurity compliance initiatives across SOC 2, ISO 27001, and NIST CSF. Responsibilities include maintaining policies and evidence repositories, identifying and remediating technical risks, coordinating project timelines, communicating directly with clients, performing control testing and readiness reviews, and supporting corrective action plans. The role also contributes to scalable compliance processes, templates, and playbooks while overseeing multiple engagements.

Manage client cybersecurity compliance programs across SOC 2, ISO 27001, and NIST frameworks. Responsibilities include maintaining policies and evidence repositories, identifying and remediating technical risks, coordinating project deliverables, conducting control testing and readiness reviews, communicating directly with clients, and overseeing compliance analysts. The role also contributes to scalable delivery processes, templates, and playbooks in a remote-first startup environment.

As a Senior GRC Engineer, you will manage client relationships, oversee compliance projects, lead a team of analysts, and enhance cybersecurity policies and procedures.

Lead operational delivery for Special Programs, managing 30–40 consultants via 4–5 managers. Own program health, timelines, quality standards, capacity planning, escalations, and executive client relationships. Coach first-line managers, perform performance management, review deliverables for technical rigor, and mitigate delivery risks to ensure client satisfaction across multiple compliance frameworks.

Provide HR operational support for India via Rippling EOR: respond to employee queries, maintain accurate HRIS records, reconcile compensation, support recruitment and background checks, track statutory compliance metrics, and liaise with Rippling and global People Ops to resolve issues and flag compliance gaps.

Own Workstreet’s marketing strategy and execution as its first marketing hire. Develop positioning, messaging, case studies, sales collateral, events, content, demand-generation programs, and market intelligence. Manage external agencies, freelancers, and channel partners while coordinating with sales, executives, and subject-matter experts. The role focuses on B2B SaaS marketing within cybersecurity and GRC, using HubSpot and external partners to accelerate growth.

Guide SaaS providers, federal organizations, and defense contractors through FedRAMP, CMMC, and NIST compliance initiatives. Responsibilities include analyzing controls, authoring SSPs and POA&Ms, conducting readiness assessments and gap analyses, defining authorization boundaries, managing continuous monitoring, coordinating CSPs and assessment teams, and advising clients on CUI, DFARS, and federal authorization requirements.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

As a GRC Engineer I, support cybersecurity compliance initiatives, maintain documentation, assist in risk mitigation, coordinate project tasks, and communicate with clients.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

As an Account Executive, you'll manage the full sales cycle, engaging with prospects in cybersecurity and compliance, and building relationships with key stakeholders.