Senior GRC Lead - Client-Focused & SOC 2/ISO 27001

Workstreet; United States; Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Career development

Technical training

Competitive compensation

Growth opportunities

Remote-first culture

Job summary

Workstreet is seeking a Sr. GRC Engineer to manage a portfolio of high-complexity client engagements focused on cybersecurity compliance across SOC 2, ISO 27001, HIPAA, and NIST CSF.

You will lead a pod of analysts, deliver audits and evidence collection, and act as a trusted advisor to drive practical compliance outcomes. You will coordinate audits, map controls, and develop security programs while maintaining exceptional client experience and professional communication.

Qualifications

• Must have client relationship management experience with direct ownership of accounts.
• Excellent written and verbal English communication skills.
• 3+ years in leading a small team (pod/squad).
• ≥3 years in cybersecurity compliance (SOC 2, ISO 27001, or NIST CSF).
• Ability to manage multiple compliance projects concurrently without compromising quality.

Responsibilities

• Own the client experience for a portfolio of high-complexity, long-term accounts.
• Lead client engagements, conduct regular meetings, provide progress updates and audits.
• Interact with US-based clients via phone, email, and text to address compliance concerns.
• Manage escalations with a solution-oriented approach to preserve client trust.
• Build trusted advisor relationships by delivering practical, actionable compliance guidance.
• Manage and develop a pod of analysts to ensure timely, high-quality work.
• Oversee audits, evidence collection, control mapping, and due diligence activities.
• Develop cybersecurity policies, procedures, and documentation to meet audit objectives.

Skills

Client relationship mgmt

English communication

Team leadership

Cybersecurity compliance

SOC 2 / ISO 27001 / NIST CSF

Policy development

Startup mindset

Job description

Workstreet is seeking a Sr. GRC Engineer to manage a portfolio of high-complexity client engagements focused on cybersecurity compliance across SOC 2, ISO 27001, HIPAA, and NIST CSF.

You will lead a pod of analysts, deliver audits and evidence collection, and act as a trusted advisor to drive practical compliance outcomes. You will coordinate audits, map controls, and develop security programs while maintaining exceptional client experience and professional communication.