Senior GRC Engineer, Special Programs — Remote

Workstreet; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Career Development

Role-Related Training

Competitive Compensation

Growth Opportunity

Remote-First Culture

Job summary

Workstreet is seeking a Senior GRC Engineer to join our Special Programs team. You will manage a portfolio of accounts, act as the primary client contact, and guide engagements end-to-end across SOC 2, ISO 27001, NIST CSF, HIPAA, and other frameworks.

You will lead a pod of junior analysts, drive audits and risk assessments, shape security policies, and continuously optimize delivery playbooks in a fast-moving startup environment.

Qualifications

• Direct experience owning high-complexity accounts.
• Experience leading small analyst pods.
• 3+ years in cybersecurity compliance.
• Proven ability to manage multiple complex projects.
• Strong written and verbal English in startup settings.
• Experience coordinating third-party audits.

Responsibilities

• Own primary account relationship management for complex, long-term client accounts.
• Lead client meetings including kickoff and milestone reviews, demonstrating compliance expertise.
• Lead end-to-end client compliance engagements through audits, risk assessments, and evidence collection.
• Manage complex account escalations with a solution-oriented approach.
• Direct and develop analyst pods through daily leadership and mentorship.
• Execute multi-framework compliance architectures (SOC 2, ISO 27001, HIPAA, NIST CSF).
• Author and enforce security policies and documentation for client certification readiness.
• Drive GRC process optimization by refining playbooks and delivery frameworks.

Skills

Client relationship lead

Pod team leadership

Technical compliance

Multi-project management

Policy framework

Startup communication

Tools

Vanta

Drata

Job description

Workstreet is seeking a Senior GRC Engineer to join our Special Programs team. You will manage a portfolio of accounts, act as the primary client contact, and guide engagements end-to-end across SOC 2, ISO 27001, NIST CSF, HIPAA, and other frameworks.

You will lead a pod of junior analysts, drive audits and risk assessments, shape security policies, and continuously optimize delivery playbooks in a fast-moving startup environment.