Manager, GRC Engineering

About Workstreet

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.  We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the Special Programs Team

The Special Programs team delivers high-impact, fast-paced services that help organizations accelerate their compliance journey. Unlike our standard offerings, Special Programs are purpose-built engagements designed to solve specific customer challenges, from establishing a compliance foundation in 30 days to migrating organizations onto new GRC platforms, supporting audits, and delivering other specialized compliance services.

For many customers, Special Programs represent their first experience working with Workstreet. Because of that, we are laser-focused on speed, quality, and an exceptional customer experience that builds trust from day one. We support hundreds of organizations, from early-stage startups to global enterprises, across nearly every industry.

The Opportunity

Workstreet is seeking a Manager, GRC Engineering who leads with a client-first mindset and brings exceptional relationship management skills to every engagement. The ideal candidate is an experienced client manager who knows how to build trust, navigate complex accounts, and deliver an outstanding client experience while bringing deep expertise in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF.

The successful candidate will come up to speed quickly, integrate into the organization, and take on active clients within their first 15 days. You will serve as the primary point of contact for a portfolio of clients, leading engagements end-to-end, managing escalations with composure and urgency, and ensuring every interaction reflects the highest standard of service during U.S. Pacific Time business hours.

What You’ll Do

• Own executive client account management - act as the primary point of contact across client portfolios, cultivating trusted executive relationships and ensuring continuous delivery alignment.
• Lead end-to-end compliance engagements - guide clients seamlessly through complete compliance lifecycles from initial kickoff to final certification with proactive communication.
• Manage complex account escalations - resolve high-stakes client issues with urgency and composure, applying structured solutions that safeguard retention and confidence.
• Deliver strategic compliance guidance - act as a trusted advisor, interpreting complex regulatory criteria into actionable, business-aligned technical controls.
• Direct and develop engineering pods - manage, mentor, and coach a dedicated pod of 3 to 5 analysts to enforce accountability and maintain strict delivery standards.
• Architect technical GRC frameworks - author and align corporate security policies, procedures, and technical controls across SOC 2, ISO 27001, HIPAA, and PCI DSS.
• Execute multi-cloud certification projects - lead complex SOC 2 and ISO 27001 implementation motions across enterprise AWS, GCP, and Azure environments.
• Leverage modern compliance automation - utilize enterprise automation platforms such as Drata, Vanta, and Secureframe to track readiness metrics and maintain continuous audit posture.

Who You Are

• Proven client relationship manager - background in direct account ownership, adept at facilitating high-stakes client meetings and navigating challenging conversations with poise.
• Experienced GRC engineering leader - bring 5+ years of direct experience leading technical teams, managing pod throughput, and coaching individual performers.
• Technical compliance expert - hands-on execution history building and managing enterprise compliance programs aligned with SOC 2 and ISO 27001 frameworks.
• Cloud control architect