[Hiring] GRC Engineer I @Workstreet

Role Description

We are seeking a highly motivated and detail-oriented GRC Engineer I to join our fast-growing team. The ideal candidate will have a solid background in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF.

• Support foundational compliance programs by assisting in the design, implementation, and maintenance of cybersecurity initiatives aligned to SOC 2, ISO 27001, and regulatory standards.
• Formulate and update compliance documentation, systematically organizing corporate cybersecurity policies, operational procedures, and audit-ready control evidence.
• Isolate and track security risks, collaborating with internal and external engineering teams to close technical gaps and implement remediation plans.
• Coordinate cross-functional project tasks, managing documentation baselines, client tracking matrices, and delivery timelines under senior engineering guidance.
• Engage directly with client contacts via multi-channel pathways to execute rapid evidence collection, clarify control requirements, and deliver transparent status updates.
• Perform routine control testing and readiness reviews to verify system state configurations and maintain continuous regulatory alignment.
• Partner with internal IT, engineering, and operations teams to embed corrective configurations and fortify overall corporate security postures.
• Absorb technical mentorship from senior practitioners to rapidly iterate and improve operational playbooks, compliance templates, and delivery velocity.

Qualifications

• Disciplined compliance coordinator with sharp organizational skills.
• Elite professional communicator with clear, precise written and verbal English communication.
• Client-facing relationship driver, comfortable working directly with US-based client portfolios.
• Hands-on GRC analyst with practical execution experience supporting or implementing core cybersecurity frameworks.
• Policy governance practitioner familiar with engineering and maintaining corporate security policies.
• Domain-native tech operator with prior experience in information security-focused technology environments.
• High-velocity startup driver, demonstrating agility and immediate task ownership.

Requirements

• Mastery of compliance automation architectures, with familiarity in automated evidence tracking and continuous control monitoring platforms like Vanta.
• Multi-framework compliance command, with knowledge of intersecting international frameworks and regulations, specifically GDPR, HIPAA, or PCI DSS.
• Validated industry credentials, with progress toward or possession of professional certifications such as ISO 27001 Lead Implementer, CISA, or CompTIA Security+.

Benefits

• Career Development: Clear path with mentorship and training opportunities.
• Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
• Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What you'll need to thrive

• Excellent written and verbal English communication skills.
• A reliable, high-speed internet connection and a professional home office environment.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET).
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

• Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable).
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders.
• Candidates will receive prompt updates and consistent communication throughout the interview process.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.