Remote GRC Engineer I: Compliance & Risk

Workstreet; United States; Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Career Development

Role-Related Training

Competitive Compensation

Growth Opportunity

Remote-First Culture

Job summary

Workstreet is seeking a GRC Engineer I for its remote-first GRC Engineering team in the United States. The role focuses on cybersecurity compliance and program management to support clients’ regulatory goals.

The successful candidate will handle multiple compliance projects, manage small teams, and align engagements with Workstreet’s security objectives while delivering rapid evidence collection and transparent status updates.

Qualifications

• Experience with SOC 2, ISO 27001, or NIST CSF architectures.
• Strong written and verbal English communication.
• Experience guiding or managing a small team and client engagements.

Responsibilities

• Support foundational compliance programs aligned to SOC 2, ISO 27001 and regulatory standards.
• Formulate and update compliance documentation with audit-ready controls.
• Isolate and track security risks and drive remediation with engineering teams.
• Coordinate cross-functional tasks, timelines, and client tracking matrices.
• Engage with client contacts to collect evidence and clarify control requirements.
• Perform routine control testing to verify configurations and regulatory alignment.
• Partner with IT, engineering, and operations to strengthen security postures.
• Absorb mentorship to improve playbooks and delivery velocity.

Skills

SOC 2

ISO 27001

NIST CSF

Communication

GRC analysis

Policy governance

Client-facing

Startup mindset

Tools

Vanta

Job description

Workstreet is seeking a GRC Engineer I for its remote-first GRC Engineering team in the United States. The role focuses on cybersecurity compliance and program management to support clients’ regulatory goals.

The successful candidate will handle multiple compliance projects, manage small teams, and align engagements with Workstreet’s security objectives while delivering rapid evidence collection and transparent status updates.