{"id":3775359,"url":"https://alion.io/job/work-street-grc-engineer-i-2","title":"GRC Engineer I","company":{"id":686337,"name":"Work Street","domain":"workstreet.com","url":"https://alion.io/company/workstreet","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":86,"open_postings":7,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-26T17:33:37Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-05T04:04:23Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"About Workstreet\nAt Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.\nGet to know the Special Programs Team\nThe Special Programs team delivers high-impact, fast-paced services that help organizations accelerate their compliance journey. Unlike our standard offerings, Special Programs are purpose-built engagements designed to solve specific customer challenges, from establishing a compliance foundation in 30 days to migrating organizations onto new GRC platforms, supporting audits, and delivering other specialized compliance services.\nFor many customers, Special Programs represent their first experience working with Workstreet. Because of that, we are laser-focused on speed, quality, and an exceptional customer experience that builds trust from day one. We support hundreds of organizations, from early-stage startups to global enterprises, across nearly every industry.\nThe Opportunity\nWorkstreet is seeking a highly motivated, client-focused GRC Engineer to join our fast-growing team. Built around client relationship excellence, this role focuses on delivering exceptional client experiences, cultivating trust, and driving program outcomes while managing accounts and overseeing a pod of analysts across frameworks such as SOC 2, ISO 27001, and NIST CSF.\nThe successful candidate will integrate quickly into the organization and manage active client accounts within their first 15 days. You will serve as the dedicated primary point of contact for a portfolio of accounts, guiding engagements end-to-end, resolving escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.\nWhat you'll do\nExecute end-to-end client compliance initiatives - assist in implementing and maintaining client security compliance programs aligned with SOC 2, ISO 27001, and regulatory standards.\nMaintain policy and evidence repositories - author and update corporate security policies, standard operating procedures, and control evidence to support formal audits and assessments.\nIdentify and mitigate technical risks - partner with cross-functional technical teams to track, evaluate, and remediate cybersecurity risks and control gaps.\nManage project deliverables and timelines - track compliance milestones, evidence gathering, and task execution across concurrent client engagements under senior guidance.\nDrive direct client communications - engage directly with client stakeholders via email, chat, and video calls to gather evidence, clarify control requirements, and share updates.\nPerform control testing and readiness reviews - conduct structured control evaluations and readiness checks to maintain continuous compliance alignment.\nPartner cross-functionally on remediation - collaborate with internal IT, security, and operations teams to execute corrective action plans and improve compliance posture.\nContribute to operational process scaling - receive mentorship from senior leaders while updating delivery templates, playbooks, and standard operating procedures.\nWho you are\nDirect client engagement operator - proven ability to communicate directly with U.S. clients, maintaining professionalism and executive care across all touchpoints.\nMulti-project GRC operator - bring strong organizational discipline to manage multiple cybersecurity compliance engagements simultaneously without losing velocity.\nTechnical compliance practitioner - hands-on execution experience across SOC 2, ISO 27001, or NIST CSF frameworks within tech-focused cybersecurity environments.\nPolicy lifecycle architect - practical familiarity authoring, rolling out, and enforcing enterprise cybersecurity policies and control benchmarks.\nHigh-velocity startup operator - thrives in fast-paced startup settings, adapting quickly to shifting priorities and dynamic client challenges.\nExceptional technical communicator - possesses outstanding written and verbal English communication skills suited for executive and technical interactions.\nWhat help you succeed\nCompliance automation platform mastery - practical exposure utilizing automated compliance solutions such as Vanta or similar GRC platforms.\nExpanded regulatory framework knowledge - practical familiarity with additional regulatory frameworks including GDPR, HIPAA, or PCI DSS.\nActive industry certifications - credentialed practitioner holding recognized certifications such as ISO 27001 Lead Implementer, CISA, or Security+.\nWhat we offer\nCareer Development: Clear path with mentorship and training opportunities.\nRole-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.\nCompetitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.\nGrowth Opportunity: Early-stage company with significant room for career advancement.\nRemote-First Culture: Flexibility to work from anywhere while collaborating with a global team.\nWhat you'll need to thrive\nExcellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.\nA reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.\nCommitment to working a standard schedule of 8:00 AM-5:00 PM U.S. Eastern Time (ET) to effectively collaborate with team members, stakeholders, and cross-functional partners while ensuring timely communication and support.\nWillingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.\nHiring and Selection Process\nCandidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.\nEmployment is contingent upon successful completion of identity verification and background screening, where permitted by law.\nSelected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.\nCandidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.\nWork Environment Requirements\nReliable high-speed internet connection.\nQuiet, professional home office setup.\nMust be amenable to work US Eastern Time zone hours.\nFluency in written and verbal English communication skills.\nWorkstreet Is An Equal Opportunity Employer\nAs an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.","description_format":"text","description_chars":7544,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Home office"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-11-04T23:08:43Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":9,"expected_fill_days":49,"reasons":["conf:0","win:early","comp:junior"],"computed_at":"2026-11-05T05:03:43Z"},"pay":null,"html_url":"https://alion.io/job/work-street-grc-engineer-i-2","json_url":"https://alion.io/job/work-street-grc-engineer-i-2.json","meta":{"generated_at":"2026-11-05T05:03:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6092,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686337},"rest":"https://alion.io/mcp/rest/get_company?id=686337"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwork-street-grc-engineer-i-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwork-street-grc-engineer-i-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwork-street-grc-engineer-i-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/work-street-grc-engineer-i-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwork-street-grc-engineer-i-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3775359}},{"tool":"search_jobs","arguments":{"company":"workstreet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3775359},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}