Zobhira
Sign up

Senior GRC Engineer

Workstreet

IndiaremotePosted 1 month ago
Workstreet logo

Skill Required

GRC-EngineerSecurity-Compliance-EngineerCybersecurity-ComplianceCompliance-EngineerRisk-And-ComplianceCybersecurity-ConsultantSenior-GRC-Automation-EngineerGRC-Security-EngineerSenior-Security-GRC-AnalystGRC-Senior-AnalystGRC-Technical-LeadSecurity-GRC-LeadSOCCybersecurityISO 27001automationdesigningsecuritybuildingwrittenandFulltime

Key highlights

  • Competitive base salary with regular performance reviews, merit-based appraisals, and bonus opportunities
  • 3+ years of experience managing or leading a small team required
  • Remote-first culture with flexibility to work from anywhere
  • Must be amenable to working US Eastern Time zone hours
  • Take on clients within your first 15 days
  • 3+ years of experience in cybersecurity compliance with hands-on work in SOC 2, ISO 27001, or NIST CSF frameworks required

Role overview

Workstreet is a fast-growing startup that helps businesses scale securely by designing and implementing cutting-edge security and compliance programs across frameworks such as SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. They are seeking a highly motivated, client-focused Senior GRC Engineer to join their team.

Responsibilities

  • Serve as the dedicated primary point of contact for a portfolio of high-complexity, long-term client accounts, ensuring consistent delivery, proactive communication, and strong relationships at every stage
  • Conduct regular client meetings, deliver progress updates, set expectations, and guide clients through audits, assessments, and compliance milestones with clarity and confidence
  • Engage directly with U.S.-based clients via phone, email, and text to address compliance concerns, provide expert guidance, and ensure clients always feel supported and informed
  • Resolve complex client issues swiftly and professionally, applying a solution-oriented approach that reinforces client trust and satisfaction
  • Build long-term relationships by understanding each client's unique business context and delivering compliance guidance that is practical, relevant, and actionable
  • Provide day-to-day direction, constructive feedback, and professional development support to a small team of junior analysts, fostering a high-performance and collaborative culture
  • Ensure the pod delivers high-quality work on time across all active client engagements, stepping in to support and coach where needed
  • Analyze and apply cybersecurity compliance requirements under SOC 2, ISO 27001, HIPAA, NIST CSF, and related standards
  • Oversee multiple client engagements simultaneously, including audits, evidence collection, control mapping, and due diligence or incident response activities
  • Create, implement, and maintain cybersecurity policies, procedures, and supporting documentation to meet audit and certification objectives
  • Work with internal and external teams to identify, assess, and mitigate cybersecurity and compliance risks
  • Enhance standard operating procedures, playbooks, and compliance frameworks to strengthen operational effectiveness
  • Manage accounts, build trust, and drive successful outcomes while overseeing a pod of analysts

Requirements

  • Demonstrated experience managing client relationships directly — comfortable owning accounts, navigating difficult conversations, and being the face of the engagement
  • Exceptional professionalism in all client-facing communication, with outstanding written and verbal English skills
  • 3+ years of experience managing or leading a small team (pod, squad, or similar structure)
  • 3+ years of experience in cybersecurity compliance, including hands-on work with SOC 2, ISO 27001, or NIST CSF frameworks
  • Proven ability to manage multiple compliance projects concurrently without sacrificing quality or client experience
  • Strong organizational skills and the ability to thrive in a fast-paced startup environment
  • Familiarity with creating and enforcing cybersecurity policies
  • Experience working in a tech company with a cybersecurity focus
  • Must be amenable to work US Eastern Time zone hours
  • Fluency in written and verbal English communication skills

Nice to have

  • Experience at a Big 4 firm (e.g., Deloitte, PwC, EY, KPMG) in an advisory or assurance capacity
  • Experience with HIPAA, PCI DSS, or additional compliance frameworks
  • Familiarity with Vanta or similar compliance automation platforms
  • Certifications such as CISA, CISSP, ISO 27001 Lead Implementer, or Security+
  • Prior experience handling audit coordination or third-party assessments

Benefits

  • Clear growth path with mentorship and training opportunities
  • Comprehensive onboarding on security and compliance frameworks
  • Competitive base salary with regular performance reviews, merit-based appraisals, and bonus opportunities
  • Early-stage company with significant room for career advancement
  • Remote-first culture with flexibility to work from anywhere while collaborating with a global team

Additional details

  • The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within their first 15 days
  • Reliable high-speed internet connection required
  • Quiet, professional home office setup required
  • Workstreet is an equal opportunity employer committed to providing employment opportunities to all individuals without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law
  • Originally posted on Himalayas
Apply now