GRC Engineer I

Overview

Workstreet is seeking a client-focused GRC Engineer to deliver client compliance programs across SOC 2, ISO 27001 and NIST CSF, serving as the primary point of contact for a portfolio of accounts and overseeing a pod of analysts.

What you'll do

• Execute end-to-end client compliance initiatives, assisting in implementing and maintaining security compliance programs aligned with SOC 2, ISO 27001 and regulatory standards.
• Maintain policy and evidence repositories, authoring and updating corporate security policies, standard operating procedures and control evidence to support formal audits and assessments.
• Identify and mitigate technical risks by partnering with cross-functional technical teams to track, evaluate and remediate cybersecurity risks and control gaps.
• Manage project deliverables and timelines, tracking compliance milestones, evidence gathering and task execution across concurrent client engagements under senior guidance.
• Drive direct client communications with stakeholders via email, chat and video calls to gather evidence, clarify control requirements and share updates.
• Perform control testing and readiness reviews through structured control evaluations and readiness checks.
• Partner cross-functionally on remediation with internal IT, security and operations teams to execute corrective action plans.
• Contribute to operational process scaling by updating delivery templates, playbooks and standard operating procedures while receiving mentorship from senior leaders.

What you'll need

• Proven ability to communicate directly with U.S. clients, maintaining professionalism and executive care across all touchpoints.
• Strong organizational discipline to manage multiple cybersecurity compliance engagements simultaneously.
• Hands-on execution experience across SOC 2, ISO 27001 or NIST CSF frameworks within tech-focused cybersecurity environments.
• Practical familiarity authoring, rolling out and enforcing enterprise cybersecurity policies and control benchmarks.
• Thrives in fast-paced startup settings, adapting quickly to shifting priorities and dynamic client challenges.
• Outstanding written and verbal English communication skills suited for executive and technical interactions.
• Excellent written and verbal English communication skills to engage confidently with candidates, hiring managers and business leaders across global teams.
• Reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews and uninterrupted collaboration.
• Commitment to a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET).
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings or business activities as needed.
• Live video interviews throughout the hiring process with camera on (non-negotiable), and ability to verify identity during recruitment and onboarding.

Nice to have

• Practical exposure utilizing automated compliance solutions such as Vanta or similar GRC platforms.
• Practical familiarity with additional regulatory frameworks including GDPR, HIPAA or PCI DSS.
• Recognized certifications such as ISO 27001 Lead Implementer, CISA or Security+.

Details

• Location: Remote (India).
• Remote-first culture with flexibility to work from anywhere while collaborating with a global team.
• Must be amenable to work US Eastern Time zone hours.
• Employment is contingent upon successful identity verification and background screening, where permitted by law.
• Compensation includes a competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Role-related training reimbursement for approved training and certification courses relevant to the current role.