SalariesSign in
AboutPrivacyTerms
Senior Manager, GRC Engineering
Workstreet

Senior Manager, GRC Engineering

United StatesRemoteFull-time
Posted Oct 2
Apply

Job Description

About Workstreet

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the GRC Engineering Team

Our GRC Engineering team is the primary point of contact for Workstreet's clients. We bring deep framework compliance knowledge and program management to each engagement to ensure our clients' compliance goals are met. Our teammates are trusted advisors not only in the compliance space, but also operationally in the role of vCISO. We deliver quickly using common templates and methodologies and are adept at creative problem-solving. GRC Engineering Team members also listen for and act as a centralized resource to advise clients on Workstreet's other service offerings to support their compliance, privacy, and information security goals.

The Opportunity

We are seeking a Senior Manager, GRC Engineering who leads with a client-first philosophy and brings a proven track record of managing high-stakes client relationships with professionalism, care, and strategic insight. The ideal candidate is an experienced client relationship leader who understands that exceptional service is the foundation of everything we do — and who pairs that client focus with 8+ years of deep expertise in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF.

The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 15 days. You will serve as the primary point of contact for a portfolio of clients, leading engagements end-to-end, managing escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.

What You'll Do

  • Own executive-level client relationships as the senior strategic point of contact for a high-priority portfolio, building deep trust, driving retention, and resolving high-stakes client escalations with absolute composure and urgency.
  • Provide overarching program governance across multiple compliance engagements, ensuring tech-sector clients remain fully prepared, informed, and calibrated throughout complex audits and certification lifecycles.
  • Supervise, mentor, and upscale a high-performing team of subordinate managers and GRC analysts, embedding a performance-driven culture focused on strict operational accountability and clear professional growth.
  • Drive departmental resource and capacity strategy, directing hiring, target profiles, and optimized workload allocation models to seamlessly support the business as it scales.
  • Establish and enforce rigorous quality benchmarks across the delivery team, verifying that every piece of technical documentation and client communication reflects the highest standard of execution.
  • Engage directly with US-based client executives and technology founders, executing proactive multi-channel communications to dismantle complex compliance roadblocks and provide tailored risk advisory.
  • Develop, execute, and maintain enterprise-grade security policies and procedures, translating dense global regulations (including SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HiTRUST, and NIST/CMMC) into scalable, operational controls.
  • Partner cross-functionally with internal and external teams to systematically isolate, evaluate, and remediate technical cybersecurity risks and framework deficiencies.

Who You Are

  • Executive portfolio commander - Command high-complexity client engagements, dismantle high-stakes structural escalations at the leadership tier, and confidently influence senior C-suite stakeholders to preserve long-term loyalty.
  • Elite corporate communicator - Assert flawless, authoritative written and verbal English communication capable of effortlessly translating dense technical risk data into clear business value for diverse audiences.
  • Scale-oriented enterprise people leader - Bring 5+ years of dedicated experience leading, upskilling, and managing mid-sized technical or professional services teams, explicitly demonstrating the capability to lead through subordinate people managers.
  • Cybersecurity compliance authority - Command 8+ years of direct, hands-on execution designing, implementing, and defending mature compliance programs across global frameworks (including SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HiTRUST, and NIST/CMMC).
  • Policy governance architect - Bring 8+ years of experience engineering and enforcing technical security policies that seamlessly align rigorous regulatory mandates with fluid business growth objectives.
  • High-velocity startup operator - Thrive within volatile, fast-growth technology ecosystems, possessing the immediate operational agility to fully integrate into an organization and absorb strategic client accounts within your first 15 days.
  • Disciplined program navigator - Command macro-level organization and program management mechanics to oversee multiple concurrent compliance engagements simultaneously without degrading delivery quality or missing deadlines.
  • Domain-native technology strategist - Verifiable tenure operating within cybersecurity-focused SaaS or technology corporations where security governance, risk assessment, and technical compliance serve as core business differentiators.

What will help you succeed

  • Big 4 advisory or assurance tenure - Prior success directing technical IT compliance audits, data governance assessments, or complex risk assurance workflows inside elite environments like Deloitte, PwC, EY, or KPMG.
  • GRC consultancy lifecycle execution - Direct history managing compliance engineering functions or vCISO delivery tracks within a high-volume managed security services provider (MSSP) or specialized security consulting practice.
  • Validated industry credentials - Hold active, globally recognized professional security and audit designations such as CISA, CISSP, CISM, ISO 27001 Lead Implementer, or CRISC.
  • Mastery of compliance automation architectures - Direct backend operational mastery navigating, configuring, and tracking continuous evidence collection inside automated platforms like Vanta, Drata, or Secureframe.
  • Multi-framework audit orchestration - Deep practical exposure designing, mapping, and defending data-driven risk management methodologies across a diverse spectrum of intersecting international regulations.

What We Offer

  • Career Development: Clear path with mentorship and training opportunities.
  • Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
  • Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
  • Growth Opportunity: Early-stage company with significant room for career advancement.
  • Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What You'll Need to Thrive

  • Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
  • A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
  • Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

  • Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
  • Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
  • Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.
  • Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.
  • Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

All employment is decided on the basis of qualifications, merit, and business need. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, Title I of the Americans with Disabilities Act of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact

Originally posted on Himalayas

View job

Red Team Security Engineer

Backblaze

  • Colombia
  • Remote
  • Full-time
Apply
5 hrs ago
View job

Information Security Analyst (Product Assurance)

Lacuna Talent

  • United States
  • Remote
  • Full-time
Apply
5 hrs ago
View job
S

Senior Cyber Security Specialist

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
6 hrs ago
View job

OT-Security Consultant / Penetration Tester (m/w/d)

Yekta IT GmbH

  • Germany
  • Remote
  • Full-time
Apply
6 hrs ago
View job
S

Client Assurance- InfoSec GRC - Remote US

SAMC SitusAMC Holdings Corp

  • United States
  • Remote
  • Full-time
Apply
7 hrs ago
View job

Network Security Engineer - Vulnerability & Compliance Focus

Support Tech LLC

  • United States
  • Remote
  • Full-time
Apply
7 hrs ago
View job

Principal AI Research Cybersecurity Scientist (Bay Area)

Alice

  • United States
  • Remote
  • Full-time
Apply
7 hrs ago
View job

Senior Risk Analyst

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
9 hrs ago
View job

Security Compliance Engineer

Yuno

  • Argentina
  • Remote
  • Full-time
Apply
10 hrs ago
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Dominican Republic
  • Remote
  • Full-time
Apply
10 hrs ago
View job

Senior Incident Response Analyst

HealthEdge

  • United States
  • Remote
  • Full-time
Apply
10 hrs ago
View job
I

SME Security Control Assessor

IMAGINEEER LLC

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Information Security Risk Specialist

Booz Allen Hamilton

  • United States
  • Remote
  • Full-time
Apply
12 hrs ago
View job

Incident Response Analyst

Check Point Software

  • Australia
  • Remote
  • Full-time
Apply
13 hrs ago
View job

Mid-Level Security Automation Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
13 hrs ago
View job

Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust

  • United States
  • Remote
  • Full-time
Apply
13 hrs ago
View job
F

Cybersecurity Analyst II

Frontgrade Technologies

  • United States
  • Remote
  • Full-time
Apply
14 hrs ago
View job

Security Operations Engineer

Collectors

  • United States
  • Remote
  • Full-time
Apply
14 hrs ago
View job

IT Security Specialist (Microsoft Azure & 365 Focus)

Support Tech LLC

  • United States
  • Remote
  • Contract
Apply
15 hrs ago
View job

Cybersecurity Program Manager

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
15 hrs ago
View job

Director, IT & Security

Illuminate Literacy

  • United States
  • Remote
  • Full-time
Apply
16 hrs ago
View job

Senior Security Operations Engineer

Sword Health

  • United States
  • Remote
  • Full-time
Apply
16 hrs ago
View job
S

Security Software Developer

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
18 hrs ago
View job

National Security Manager

Fujifilm

  • United States
  • Remote
Apply
19 hrs ago
View job

Manager Identity & Trust Engineering

BlueCross BlueShield of Tennessee

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Senior Product Owner DevSecOps

Humana

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Sr. Engineer, Product Cyber Security

BD

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Sr. Security/ Technology Engineer

NV5

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Cyber Security Cloud Engineer

National Carwash Solutions

  • United States
  • Remote
  • Full-time
Apply
20 hrs ago
Page 1 of 128Next
Workstreet

Senior Manager, GRC Engineering

United StatesRemoteFull-time
Posted Oct 2
Apply

Job Description

About Workstreet

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the GRC Engineering Team

Our GRC Engineering team is the primary point of contact for Workstreet's clients. We bring deep framework compliance knowledge and program management to each engagement to ensure our clients' compliance goals are met. Our teammates are trusted advisors not only in the compliance space, but also operationally in the role of vCISO. We deliver quickly using common templates and methodologies and are adept at creative problem-solving. GRC Engineering Team members also listen for and act as a centralized resource to advise clients on Workstreet's other service offerings to support their compliance, privacy, and information security goals.

The Opportunity

We are seeking a Senior Manager, GRC Engineering who leads with a client-first philosophy and brings a proven track record of managing high-stakes client relationships with professionalism, care, and strategic insight. The ideal candidate is an experienced client relationship leader who understands that exceptional service is the foundation of everything we do — and who pairs that client focus with 8+ years of deep expertise in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF.

The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 15 days. You will serve as the primary point of contact for a portfolio of clients, leading engagements end-to-end, managing escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.

What You'll Do

  • Own executive-level client relationships as the senior strategic point of contact for a high-priority portfolio, building deep trust, driving retention, and resolving high-stakes client escalations with absolute composure and urgency.
  • Provide overarching program governance across multiple compliance engagements, ensuring tech-sector clients remain fully prepared, informed, and calibrated throughout complex audits and certification lifecycles.
  • Supervise, mentor, and upscale a high-performing team of subordinate managers and GRC analysts, embedding a performance-driven culture focused on strict operational accountability and clear professional growth.
  • Drive departmental resource and capacity strategy, directing hiring, target profiles, and optimized workload allocation models to seamlessly support the business as it scales.
  • Establish and enforce rigorous quality benchmarks across the delivery team, verifying that every piece of technical documentation and client communication reflects the highest standard of execution.
  • Engage directly with US-based client executives and technology founders, executing proactive multi-channel communications to dismantle complex compliance roadblocks and provide tailored risk advisory.
  • Develop, execute, and maintain enterprise-grade security policies and procedures, translating dense global regulations (including SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HiTRUST, and NIST/CMMC) into scalable, operational controls.
  • Partner cross-functionally with internal and external teams to systematically isolate, evaluate, and remediate technical cybersecurity risks and framework deficiencies.

Who You Are

  • Executive portfolio commander - Command high-complexity client engagements, dismantle high-stakes structural escalations at the leadership tier, and confidently influence senior C-suite stakeholders to preserve long-term loyalty.
  • Elite corporate communicator - Assert flawless, authoritative written and verbal English communication capable of effortlessly translating dense technical risk data into clear business value for diverse audiences.
  • Scale-oriented enterprise people leader - Bring 5+ years of dedicated experience leading, upskilling, and managing mid-sized technical or professional services teams, explicitly demonstrating the capability to lead through subordinate people managers.
  • Cybersecurity compliance authority - Command 8+ years of direct, hands-on execution designing, implementing, and defending mature compliance programs across global frameworks (including SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HiTRUST, and NIST/CMMC).
  • Policy governance architect - Bring 8+ years of experience engineering and enforcing technical security policies that seamlessly align rigorous regulatory mandates with fluid business growth objectives.
  • High-velocity startup operator - Thrive within volatile, fast-growth technology ecosystems, possessing the immediate operational agility to fully integrate into an organization and absorb strategic client accounts within your first 15 days.
  • Disciplined program navigator - Command macro-level organization and program management mechanics to oversee multiple concurrent compliance engagements simultaneously without degrading delivery quality or missing deadlines.
  • Domain-native technology strategist - Verifiable tenure operating within cybersecurity-focused SaaS or technology corporations where security governance, risk assessment, and technical compliance serve as core business differentiators.

What will help you succeed

  • Big 4 advisory or assurance tenure - Prior success directing technical IT compliance audits, data governance assessments, or complex risk assurance workflows inside elite environments like Deloitte, PwC, EY, or KPMG.
  • GRC consultancy lifecycle execution - Direct history managing compliance engineering functions or vCISO delivery tracks within a high-volume managed security services provider (MSSP) or specialized security consulting practice.
  • Validated industry credentials - Hold active, globally recognized professional security and audit designations such as CISA, CISSP, CISM, ISO 27001 Lead Implementer, or CRISC.
  • Mastery of compliance automation architectures - Direct backend operational mastery navigating, configuring, and tracking continuous evidence collection inside automated platforms like Vanta, Drata, or Secureframe.
  • Multi-framework audit orchestration - Deep practical exposure designing, mapping, and defending data-driven risk management methodologies across a diverse spectrum of intersecting international regulations.

What We Offer

  • Career Development: Clear path with mentorship and training opportunities.
  • Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
  • Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
  • Growth Opportunity: Early-stage company with significant room for career advancement.
  • Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What You'll Need to Thrive

  • Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
  • A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
  • Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

  • Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
  • Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
  • Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.
  • Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.
  • Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

All employment is decided on the basis of qualifications, merit, and business need. In order to ensure reasonable accommodation for individuals protected by Section 503 of the Rehabilitation Act of 1973, the Vietnam Era Veterans’ Readjustment Assistance Act of 1974, Title I of the Americans with Disabilities Act of 1990, and any other applicable federal, state or local laws, applicants who require reasonable accommodation in the job application process may contact

Originally posted on Himalayas