Jobs at Workstreet

As a Senior GRC Engineer, you will manage client relationships, oversee compliance projects, lead a team of analysts, and enhance cybersecurity policies and procedures.

Reviews and validates compliance evidence in GRC platforms, conducts internal audits and readiness assessments, identifies control gaps, recommends remediation, and communicates audit timelines and outcomes. The role focuses on information security and compliance frameworks including ISO 27001, ISO 42001, HIPAA, GDPR, SOC 2, and NIST. It requires coordinating multiple compliance initiatives, analyzing technical evidence, and collaborating with engineering, customer success, and leadership teams.

The GRC Engineer I will assist in implementing cybersecurity compliance programs, maintain documentation, support risk mitigation, engage with clients, and collaborate cross-functionally while learning from senior team members.

Reviews and validates compliance evidence in GRC platforms, conducts internal audits and readiness assessments, identifies control gaps, recommends remediation, and communicates audit timelines and outcomes. The role requires translating information security and privacy frameworks into technical controls, managing multiple compliance initiatives, analyzing audit evidence, and collaborating with engineering, customer success, GRC consultants, and leadership.

Lead operational delivery for Special Programs, managing 30–40 consultants via 4–5 managers. Own program health, timelines, quality standards, capacity planning, escalations, and executive client relationships. Coach first-line managers, perform performance management, review deliverables for technical rigor, and mitigate delivery risks to ensure client satisfaction across multiple compliance frameworks.

Provide HR operational support for India via Rippling EOR: respond to employee queries, maintain accurate HRIS records, reconcile compensation, support recruitment and background checks, track statutory compliance metrics, and liaise with Rippling and global People Ops to resolve issues and flag compliance gaps.

Own Workstreet’s marketing strategy and execution as its first marketing hire. Develop positioning, messaging, case studies, sales collateral, events, content, demand-generation programs, and market intelligence. Manage external agencies, freelancers, and channel partners while coordinating with sales, executives, and subject-matter experts. The role focuses on B2B SaaS marketing within cybersecurity and GRC, using HubSpot and external partners to accelerate growth.

Support federal cybersecurity compliance initiatives across NIST 800-53, FedRAMP, and RMF lifecycles. Responsibilities include control mapping, authoring SSPs and POA&Ms, conducting readiness and gap assessments, supporting continuous monitoring, coordinating 3PAO assessments, assisting remediation, documenting cloud authorization boundaries, and tracking regulatory updates. The role requires direct client communication, management of multiple projects, and familiarity with AWS GovCloud or Azure Government.

Guide SaaS providers, federal organizations, and defense contractors through FedRAMP, CMMC, and NIST compliance initiatives. Responsibilities include analyzing controls, authoring SSPs and POA&Ms, conducting readiness assessments and gap analyses, defining authorization boundaries, managing continuous monitoring, coordinating CSPs and assessment teams, and advising clients on CUI, DFARS, and federal authorization requirements.

Support US and European HR compliance and people operations from the Philippines or India. Own US state tax and unemployment registrations, I-9 verification, background checks, HRIS data (Rippling), government correspondence, company mail, and employee engagement programs. Maintain accurate records, process lifecycle changes, coordinate swag and recognition, and support virtual events while collaborating with the US-based HR Manager.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

As a GRC Engineer I, support cybersecurity compliance initiatives, maintain documentation, assist in risk mitigation, coordinate project tasks, and communicate with clients.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

As an Account Executive, you'll manage the full sales cycle, engaging with prospects in cybersecurity and compliance, and building relationships with key stakeholders.

Lead end-to-end GRC client engagements, manage a pod of analysts, advise on SOC 2/ISO/NIST frameworks, develop policies, guide audits and evidence collection, and maintain client relationships to drive compliance outcomes.

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.

Provide end-to-end internal IT support including onboarding/offboarding, access and license management, first-line user support (passwords, MFA, access requests), account provisioning and SSO configuration, documentation of IT SOPs and workflows, and cross-functional coordination with HR, People Ops, and security to ensure compliant, smooth employee technology experiences.