GRC Engineer I (Special Programs)

Workstreet; India; On-site; INR 1,400,000 - 2,200,000; Full time

Benefits offered by this job

Career development

Role‑related training

Competitive compensation

Growth opportunities

Remote‑first culture

Job summary

Workstreet is seeking a highly motivated GRC Engineer to join our Special Programs team. You will manage a portfolio of client accounts, guiding engagements end‑to‑end, and ensuring high‑quality service across SOC 2, ISO 27001, and NIST CSF frameworks.

You will partner with cross‑functional teams to mitigate risks, maintain policy evidence, and drive remediation plans while thriving in a fast‑paced startup culture with a remote‑first environment.

Qualifications

• Direct client engagement with U.S. clients and cross‑functional teams.
• Multi‑project GRC engagements across SOC 2, ISO 27001, NIST CSF.
• Hands‑on execution in cyber‑security compliance environments.

Responsibilities

• Execute end‑to‑end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards.
• Maintain policy and evidence repositories to support audits and assessments.
• Identify and mitigate technical risks with cross‑functional partners.
• Manage project deliverables and timelines across concurrent engagements.
• Drive direct client communications via email, chat, and video calls.
• Perform control testing and readiness reviews for continuous compliance.
• Collaborate on remediation with IT, security, and operations teams.
• Contribute to scaling delivery processes and templates.

Skills

Direct client engagement

Multi‑project GRC

Technical compliance

Policy lifecycle

Startup agility

Executive communication

Tools

Vanta or similar GRC platform

Job description

About Workstreet

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting‑edge security and compliance programs. As a fast‑growing startup, we specialise in a wide range of GRC services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the Special Programs Team

The Special Programs team delivers high‑impact, fast‑paced services that help organisations accelerate their compliance journey. Unlike our standard offerings, Special Programs are purpose‑built engagements designed to solve specific customer challenges, from establishing a compliance foundation in 30 days to migrating organisations onto new GRC platforms, supporting audits, and delivering other specialised compliance services.

For many customers, Special Programs represent their first experience working with Workstreet. Because of that, we are laser‑focused on speed, quality, and an exceptional customer experience that builds trust from day one. We support hundreds of organisations, from early‑stage startups to global enterprises, across nearly every industry.

The Opportunity

Workstreet is seeking a highly motivated, client‑focused GRC Engineer to join our fast‑growing team. Built around client relationship excellence, this role focuses on delivering exceptional client experiences, cultivating trust, and driving programme outcomes while managing accounts and overseeing a pod of analysts across frameworks such as SOC 2, ISO 27001, and NIST CSF.

The successful candidate will integrate quickly into the organisation and manage active client accounts within their first 15 days. You will serve as the dedicated primary point of contact for a portfolio of accounts, guiding engagements end‑to‑end, resolving escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.

What You’ll Do

• Execute end‑to‑end client compliance initiatives – assist in implementing and maintaining client security compliance programmes aligned with SOC 2, ISO 27001, and regulatory standards.
• Maintain policy and evidence repositories – author and update corporate security policies, standard operating procedures, and control evidence to support formal audits and assessments.
• Identify and mitigate technical risks – partner with cross‑functional technical teams to track, evaluate, and remediate cyber‑security risks and control gaps.
• Manage project deliverables and timelines – track compliance milestones, evidence gathering, and task execution across concurrent client engagements under senior guidance.
• Drive direct client communications – engage directly with client stakeholders via e‑mail, chat, and video calls to gather evidence, clarify control requirements, and share updates.
• Perform control testing and readiness reviews – conduct structured control evaluations and readiness checks to maintain continuous compliance alignment.
• Partner cross‑functionally on remediation – collaborate with internal IT, security, and operations teams to execute corrective action plans and improve compliance posture.
• Contribute to operational process scaling – receive mentorship from senior leaders while updating delivery templates, playbooks, and standard operating procedures.

Who You Are

• Direct client engagement operator – proven ability to communicate directly with U.S. clients, maintaining professionalism and executive care across all touchpoints.
• Multi‑project GRC operator – bring strong organisational discipline to manage multiple cyber‑security compliance engagements simultaneously without losing velocity.
• Technical compliance practitioner – hands‑on execution experience across SOC 2, ISO 27001, or NIST CSF frameworks within tech‑focused cyber‑security environments.
• Policy lifecycle architect – practical familiarity authoring, rolling out, and enforcing enterprise cyber‑security policies and control benchmarks.
• High‑velocity startup operator – thrives in fast‑paced startup settings, adapting quickly to shifting priorities and dynamic client challenges.
• Exceptional technical communicator – possesses outstanding written and verbal English communication skills suited for executive and technical interactions.

What Help You Succeed

• Compliance automation platform mastery – practical exposure utilizing automated compliance solutions such as Vanta or similar GRC platforms.
• Expanded regulatory framework knowledge – practical familiarity with additional regulatory frameworks including GDPR, HIPAA, or PCI DSS.
• Active industry certifications – credentialed practitioner holding recognised certifications such as ISO 27001 Lead Implementer, CISA, or Security+.

What We Offer

• Career Development: Clear path with mentorship and training opportunities.
• Role‑Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
• Competitive Compensation: A competitive base salary with regular performance reviews linked to merit‑based appraisals and bonus opportunities.
• Growth Opportunity: Early‑stage company with significant room for career advancement.
• Remote‑First Culture: Flexibility to work from anywhere while collaborating with a global team.

What You’ll Need To Thrive

• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
• A reliable, high‑speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET) to effectively collaborate with team members, stakeholders, and cross‑functional partners while ensuring timely communication and support.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

• Candidates must participate in live video interviews throughout the hiring process with camera on (non‑negotiable) and be prepared to verify their identity during recruitment and onboarding.
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Selected candidates will participate in structured interviews with hiring managers and cross‑functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.
• Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.

Work Environment Requirements

• Reliable high‑speed internet connection.
• Quiet, professional home office setup.
• Must be amenable to work US Eastern Time zone hours.
• Fluency in written and verbal English communication skills.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, colour, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.