GRC Engineer I
Workstreet
IndiaremotePosted 1 month ago
Skill Required
GRC-EngineeringCybersecurity-ComplianceCompliance-EngineeringGRC-SpecialistSecurity-ComplianceGRC-EngineerGRC-Security-EngineerEngineering-GRCGRC-JobsGRC-AnalystGRC-Analyst-JobsCybersecurityISO 27001designingsecuritywrittenTestNGDesign PatternsContract
Key highlights
- Competitive base salary with merit‑based bonuses.
- Experience required in cybersecurity compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.
- Remote‑first work environment offering flexibility to work from anywhere.
- Must be able to work US Eastern Time zone hours.
- Opportunity for career advancement in an early‑stage startup.
- Mentorship and technical training on security and compliance frameworks.
Role overview
Workstreet is a fast‑growing startup that helps businesses scale securely by designing and implementing cutting‑edge security and compliance programs across frameworks such as SOC 2, ISO 27001, GDPR, CMMC, NIST 800‑171, NIST 800‑53, and FedRAMP. The company is looking for a highly motivated GRC Engineer I to support multiple cybersecurity compliance projects, work directly with US‑based clients, and help deliver effective security solutions. The role offers mentorship from senior team members, opportunities to improve compliance processes, and the chance to grow within an early‑stage, remote‑first organization.
Responsibilities
- Support Compliance Initiatives: Assist in implementing and maintaining cybersecurity compliance programs aligned with SOC 2, ISO 27001, and other regulatory standards.
- Maintain Documentation: Develop and update cybersecurity policies, procedures, and control evidence to support audits and assessments.
- Assist in Risk Mitigation: Work with internal and external teams to identify, track, and help remediate cybersecurity risks and control gaps.
- Coordinate Project Tasks: Support multiple compliance projects by managing documentation, timelines, and deliverables under senior guidance.
- Communicate with Clients: Engage with clients via email, chat, and calls to gather evidence, clarify compliance requirements, and provide timely updates.
- Perform Control Testing: Conduct basic control checks and assist in readiness reviews to ensure continuous compliance with internal and external standards.
- Collaborate Cross‑Functionally: Partner with IT, security, and operations teams to implement corrective actions and strengthen compliance posture.
- Learn and Grow: Receive mentorship from senior team members and contribute to improving processes, templates, and playbooks for compliance delivery.
Requirements
- Strong organizational skills with the ability to manage multiple cybersecurity compliance projects concurrently.
- Exceptional written and verbal English communication skills.
- Proven ability to work directly with clients in the US.
- Experience working in cybersecurity compliance, including SOC 2, ISO 27001, or NIST CSF frameworks.
- Familiarity with creating and enforcing cybersecurity policies.
- Experience working in a tech company with a focus on cybersecurity.
- Thrives in a fast‑paced startup environment.
- Reliable high‑speed internet connection.
- Quiet, professional home office setup.
- Must be amenable to work US Eastern Time zone hours.
- Fluency in written and verbal English communication skills.
Nice to have
- Familiarity with Vanta or similar compliance automation platforms.
- Additional experience with frameworks such as GDPR, HIPAA, or PCI DSS.
- Certifications such as ISO 27001 Lead Implementer, CISA, or Security+.
Benefits
- Career Development: Clear path with mentorship and training opportunities.
- Technical Training: Comprehensive onboarding on security and compliance frameworks.
- Competitive Compensation: A competitive base salary with regular performance reviews linked to merit‑based appraisals and bonus opportunities.
- Growth Opportunity: Early‑stage company with significant room for career advancement.
- Remote‑First Culture: Flexibility to work from anywhere while collaborating with a global team.
Additional details
- About Workstreet: The company helps businesses scale securely by designing and implementing cutting‑edge security and compliance programs across a wide range of frameworks.
- Workstreet is an Equal Opportunity Employer, committed to providing employment opportunities without regard to protected characteristics.
- Employment is contingent upon successful completion of a background check, which may include verification of employment history, education, and other relevant information.
- Originally posted on Himalayas.