GRC Engineering Manager

About Workstreet

At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.

Get to know the GRC Engineering Team

Our GRC Engineering team is the primary point of contact for Workstreet's clients, bringing framework compliance knowledge and program management to each engagement. Team members act as trusted advisors and operate in the role of vCISO.

The Opportunity

We are seeking a Senior Manager, GRC Engineering who leads with a client-first philosophy and brings a proven track record of managing high-stakes client relationships. The ideal candidate has 8+ years of deep expertise in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF. The successful candidate will act as a high-level executive strategic partner to own account growth and retention across a dedicated portfolio, directing an operational pod that manages day-to-day delivery.

What You'll Do

• Own executive-level client relationships as the senior strategic point of contact for a high-priority portfolio.
• Provide overarching program governance across multiple compliance engagements.
• Supervise, mentor, and upskill a team of subordinate managers and GRC analysts.
• Drive departmental resource and capacity strategy, including hiring and workload allocation.
• Establish and enforce quality benchmarks across the delivery team.
• Engage directly with US-based client executives and technology founders.
• Develop, execute, and maintain enterprise-grade security policies and procedures.
• Partner cross-functionally to isolate, evaluate, and remediate technical cybersecurity risks.

Who You Are

• Executive portfolio commander with the ability to influence senior C-suite stakeholders.
• Elite corporate communicator with flawless written and verbal English.
• Scale-oriented enterprise people leader with 5+ years leading mid-sized technical or professional services teams.
• Cybersecurity compliance authority with 8+ years of hands-on experience designing and defending compliance programs.
• Policy governance architect with 8+ years of experience engineering technical security policies.
• High-velocity startup operator who can integrate within 15 days.
• Disciplined program navigator managing multiple concurrent compliance engagements.
• Domain-native technology strategist with tenure in cybersecurity-focused SaaS or technology companies.

What Will Help You Succeed

• Big 4 advisory or assurance tenure (Deloitte, PwC, EY, or KPMG).
• GRC consultancy lifecycle execution within an MSSP or security consulting practice.
• Validated industry credentials such as CISA, CISSP, CISM, ISO 27001 Lead Implementer, or CRISC.
• Mastery of compliance automation platforms such as Vanta, Drata, or Secureframe.
• Multi-framework audit orchestration across international regulations.

What We Offer

• Career development with mentorship and training opportunities.
• Role-related training reimbursement for approved courses and certifications.
• Competitive base salary with performance reviews and bonus opportunities.
• Growth opportunity in an early-stage company.
• Remote-first culture with flexibility to work from anywhere.

What You'll Need to Thrive

• Excellent written and verbal English communication skills.
• A reliable high-speed internet connection and a professional home office.
• Commitment to a standard schedule of 8:00 AM to 5:00 PM US Eastern Time, with occasional flexibility.
• Willingness to travel locally for occasional onsite meetings.

Hiring and Selection Process

• Candidates must participate in live video interviews with camera on and verify identity during recruitment and onboarding.
• Employment is contingent upon identity verification and background screening, where permitted by law.
• Applicants must be authorized to work in the U.S. without visa sponsorship now or in the future.

Equal Opportunity

Workstreet is an equal opportunity employer committed to providing employment opportunities to all individuals regardless of protected characteristics. Accommodation requests may be sent to [email protected].