GRC Engineer I: Remote Compliance & Risk

Workstreet; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Career Development

Role-Related Training

Competitive Compensation

Growth Opportunity

Remote-First Culture

Job summary

Workstreetis seeking a detail-oriented GRC Engineer I to join our fast-growing team. You will focus on cybersecurity compliance across SOC 2, ISO 27001, and NIST CSF, coordinating with internal and external teams to deliver client engagements that meet security objectives.

The role emphasizes strong communication, multi-project management, and hands-on GRC analysis with potential for mentorship and rapid skill development in a dynamic startup environment.

Qualifications

• Solid background in cybersecurity compliance frameworks (SOC 2, ISO 27001, NIST CSF).
• Strong communication skills for client-facing interactions.
• Experience overseeing or managing small teams on compliance engagements.

Responsibilities

• Support foundational compliance programs aligned to SOC 2, ISO 27001, and regulatory standards.
• Document and update compliance policies, procedures, and audit evidence.
• Identify and track security risks, coordinate remediation with engineering teams.
• Manage cross-functional tasks, timelines, and client tracking matrices.
• Engage with client contacts to collect evidence and clarify control requirements.
• Perform routine control testing and readiness reviews to maintain regulatory alignment.
• Collaborate with IT, engineering, and operations to strengthen security posture.

Skills

GRC frameworks

SOC 2

ISO 27001

NIST CSF

Client communication

Project management

Tools

Vanta

Job description

Workstreetis seeking a detail-oriented GRC Engineer I to join our fast-growing team. You will focus on cybersecurity compliance across SOC 2, ISO 27001, and NIST CSF, coordinating with internal and external teams to deliver client engagements that meet security objectives.

The role emphasizes strong communication, multi-project management, and hands-on GRC analysis with potential for mentorship and rapid skill development in a dynamic startup environment.