Jobs at Workstreet

Support US and European HR compliance and people operations from the Philippines or India. Own US state tax and unemployment registrations, I-9 verification, background checks, HRIS data (Rippling), government correspondence, company mail, and employee engagement programs. Maintain accurate records, process lifecycle changes, coordinate swag and recognition, and support virtual events while collaborating with the US-based HR Manager.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

As a GRC Engineer I, support cybersecurity compliance initiatives, maintain documentation, assist in risk mitigation, coordinate project tasks, and communicate with clients.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

As an Account Executive, you'll manage the full sales cycle, engaging with prospects in cybersecurity and compliance, and building relationships with key stakeholders.

The GRC Engineer I will assist in implementing cybersecurity compliance programs, maintain documentation, support risk mitigation, engage with clients, and collaborate cross-functionally while learning from senior team members.

Lead end-to-end GRC client engagements, manage a pod of analysts, advise on SOC 2/ISO/NIST frameworks, develop policies, guide audits and evidence collection, and maintain client relationships to drive compliance outcomes.

Manage high-volume partner contract creation and post-execution lifecycle, enforce SLAs, maintain CRM and integrated platform data integrity (HubSpot, Airtable, StreetSmart), support Vanta tenant onboarding and user permissions, perform weekly database audits, and provide technical onboarding assistance to sales and customer teams.

Manage high-volume partner contract creation and lifecycle, maintain CRM and integrated platform data integrity, execute rapid deal closure workflows, support platform onboarding and tenant configuration in Vanta, and perform regular database audits to ensure accurate records and SLA-driven processing.

Support sales operations by creating and processing contracts, managing deals in HubSpot, maintaining data integrity across HubSpot, Streetsmart, Airtable and Vanta, provisioning customers, administering platform permissions, performing weekly quality audits, and meeting strict SLAs for high-volume deal and contract processing.

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.

Conduct structured penetration tests across web, mobile, network, cloud, containers, and AI/LLM systems; produce technical reports and exploit proofs; build custom tooling and social engineering simulations; collaborate with client engineering teams to remediate and verify fixes; support incident response and maintain client communications.

Serve as a hands-on Vulnerability Management Engineer advising fast-growth clients: manage scanning infrastructure, analyze and prioritize findings (CVSS/EPSS), remediate vulnerabilities in cloud environments (AWS/Azure/GCP), map patching to audit evidence, and act as the primary security contact to drive remediation and compliance (SOC 2, ISO 27001, HIPAA, CMMC).

Serve as a hands-on Vulnerability Management Engineer for a portfolio of startups: manage scanning infrastructure (Tenable/Nessus, Qualys, Rapid7, Vanta), analyze and prioritize vulnerabilities using CVSS/EPSS and threat intelligence, collaborate with client IT/DevOps to remediate and map patching to compliance evidence, manage exceptions, and act as a primary security advisor delivering status reports and executive summaries.

Provide end-to-end internal IT support including onboarding/offboarding, access and license management, first-line user support (passwords, MFA, access requests), account provisioning and SSO configuration, documentation of IT SOPs and workflows, and cross-functional coordination with HR, People Ops, and security to ensure compliant, smooth employee technology experiences.

Own brand and design consistency for customer-facing assets, audit deliverable quality, run targeted customer email campaigns, design and track training programs, create SOPs and workflows, govern templates and AI automation, and support high-visibility internal communications across Sales, Marketing, Delivery, and HR.

Lead operational delivery for Special Programs, managing 30–40 consultants via 4–5 managers. Own program health, timelines, quality standards, capacity planning, escalations, and executive client relationships. Coach first-line managers, perform performance management, review deliverables for technical rigor, and mitigate delivery risks to ensure client satisfaction across multiple compliance frameworks.

Provide HR operational support for India via Rippling EOR: respond to employee queries, maintain accurate HRIS records, reconcile compensation, support recruitment and background checks, track statutory compliance metrics, and liaise with Rippling and global People Ops to resolve issues and flag compliance gaps.