[Remote] Manager, GRC Engineering

Note: The job is a remote job and is open to candidates in USA. Workstreet is a fast-growing startup that designs and implements cybersecurity governance, risk, and compliance programs for organizations across a range of regulatory frameworks. The Manager, GRC Engineering will lead client engagements, manage executive relationships and escalations, and guide end-to-end compliance programs. The role also directs engineering pods, architects GRC controls, leads multi-cloud certification projects, and uses compliance automation platforms to maintain audit readiness.

Responsibilities

• Own executive client account management - act as the primary point of contact across client portfolios, cultivating trusted executive relationships and ensuring continuous delivery alignment
• Lead end-to-end compliance engagements - guide clients seamlessly through complete compliance lifecycles from initial kickoff to final certification with proactive communication
• Manage complex account escalations - resolve high-stakes client issues with urgency and composure, applying structured solutions that safeguard retention and confidence
• Deliver strategic compliance guidance - act as a trusted advisor, interpreting complex regulatory criteria into actionable, business-aligned technical controls
• Direct and develop engineering pods - manage, mentor, and coach a dedicated pod of 3 to 5 analysts to enforce accountability and maintain strict delivery standards
• Architect technical GRC frameworks - author and align corporate security policies, procedures, and technical controls across SOC 2, ISO 27001, HIPAA, and PCI DSS
• Execute multi-cloud certification projects - lead complex SOC 2 and ISO 27001 implementation motions across enterprise AWS, GCP, and Azure environments
• Leverage modern compliance automation - utilize enterprise automation platforms such as Drata, Vanta, and Secureframe to track readiness metrics and maintain continuous audit posture

Skills

• Proven client relationship manager - background in direct account ownership, adept at facilitating high-stakes client meetings and navigating challenging conversations with poise
• Experienced GRC engineering leader - bring 5+ years of direct experience leading technical teams, managing pod throughput, and coaching individual performers
• Technical compliance expert - hands-on execution history building and managing enterprise compliance programs aligned with SOC 2 and ISO 27001 frameworks
• Cloud control architect - strong practical knowledge implementing technical security controls within AWS, GCP, or Azure environments
• Multi-project delivery operator - proven track record of managing multiple concurrent technical compliance engagements without sacrificing execution quality or client satisfaction
• Autonomous technical operator - self-directed practitioner holding a Bachelor's degree in IT, Cybersecurity, or a related technical discipline, operating with exceptional initiative
• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams
• A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration
• Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET) to effectively collaborate with team members, stakeholders, and cross-functional partners while ensuring timely communication and support
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed
• Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet's operating principles
• Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step
• Applicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category
• Big 4 consulting tenure - background in risk advisory, technical assurance, or security consulting at a Big 4 or elite professional services firm
• Active industry certifications - credentialed professional holding active CISA, CISSP, CISM, or equivalent security designations
• Specialized GRC advisory history - documented success managing external technical clients within specialized cybersecurity consulting environments
• Expanded framework mastery - deep operational familiarity with additional regulatory and security standards including HITRUST, PCI DSS, NIST, GDPR, and HIPAA

Benefits

• Mentorship and training opportunities.
• Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
• Bonus opportunities.
• Significant room for career advancement.
• Remote-first flexibility to work from anywhere while collaborating with a global team.

Company Overview