{"id":700099,"url":"https://alion.io/job/workstreet-senior-grc-engineer-2","title":"Senior GRC Engineer","company":{"id":686337,"name":"Work Street","domain":"workstreet.com","url":"https://alion.io/company/workstreet","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":86,"open_postings":7,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":39000,"period":"year","method":"role_seniority_country_cell","sample_n":13},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"GDPR","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-04-23T17:44:06Z","employer_posted_date":"2026-04-23","last_verified_at":"2026-11-02T23:18:45Z","board_verified":true,"closed_at":null,"days_open":193,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":192},"description":"About Workstreet\nAt Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of frameworks-including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP-empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one.\n The Opportunity\nWe are seeking a highly motivated, client-focused Sr. GRC Engineer to join our fast-growing team. The ideal candidate is a seasoned client relationship manager who brings deep expertise in cybersecurity compliance and a proven track record of leading high-complexity client engagements with professionalism and care. This role is first and foremost about delivering an exceptional client experience - managing accounts, building trust, and driving successful outcomes - while overseeing a pod of analysts and applying expertise across frameworks such as SOC 2, ISO 27001, and NIST CSF.\nThe successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 15 days. You will serve as the primary point of contact for a portfolio of clients, leading engagements end-to-end, managing escalations with composure and urgency, and ensuring every client interaction reflects the highest standard of service.\nWhat You'll Do\nClient Relationship Management (Primary Focus)\nOwn the Client Experience: Serve as the dedicated primary contact for a portfolio of high-complexity, long-term client accounts, ensuring consistent delivery, proactive communication, and strong relationships at every stage of the engagement.\nLead Client Engagements: Conduct regular client meetings, deliver progress updates, set expectations, and guide clients through audits, assessments, and compliance milestones with clarity and confidence.\nCommunicate with Care: Engage directly with U.S.-based clients via phone, email, and text to address compliance concerns, provide expert guidance, and ensure clients always feel supported and informed.\nHandle Escalations: Resolve complex client issues swiftly and professionally, applying a solution-oriented approach that reinforces client trust and satisfaction.\nBe a Trusted Advisor: Build long-term relationships by understanding each client's unique business context and delivering compliance guidance that is practical, relevant, and actionable.\nTeam Leadership\nManage and Develop a Pod of Analysts: Provide day-to-day direction, constructive feedback, and professional development support to a small team of junior analysts, fostering a high-performance and collaborative culture.\nDrive Accountability: Ensure the pod delivers high-quality work on time across all active client engagements, stepping in to support and coach where needed.\nGRC & Compliance Execution\nInterpret Regulatory Frameworks: Analyze and apply cybersecurity compliance requirements under SOC 2, ISO 27001, HIPAA, NIST CSF, and related standards.\nLead Compliance Projects: Oversee multiple client engagements simultaneously, including audits, evidence collection, control mapping, and due diligence or incident response activities.\nDevelop Compliance Programs: Create, implement, and maintain cybersecurity policies, procedures, and supporting documentation to meet audit and certification objectives.\nCollaborate on Risk Management: Work with internal and external teams to identify, assess, and mitigate cybersecurity and compliance risks.\nDrive Process Improvement: Enhance standard operating procedures, playbooks, and compliance frameworks to strengthen operational effectiveness.\nWho You Are\nRequired\nDemonstrated experience managing client relationships directly - you are comfortable owning accounts, navigating difficult conversations, and being the face of the engagement\nExceptional professionalism in all client-facing communication, with outstanding written and verbal English skills\n3+ years of experience managing or leading a small team (pod, squad, or similar structure)\n3+ years of experience in cybersecurity compliance, including hands-on work with SOC 2, ISO 27001, or NIST CSF frameworks\nProven ability to manage multiple compliance projects concurrently without sacrificing quality or client experience\nStrong organizational skills and the ability to thrive in a fast-paced startup environment\nFamiliarity with creating and enforcing cybersecurity policies\nExperience working in a tech company with a cybersecurity focus\nNice to Have\nExperience at a Big 4 firm (e.g., Deloitte, PwC, EY, KPMG) in an advisory or assurance capacity\nExperience with HIPAA, PCI DSS, or additional compliance frameworks\nFamiliarity with Vanta or similar compliance automation platforms\nCertifications such as CISA, CISSP, ISO 27001 Lead Implementer, or Security+\nPrior experience handling audit coordination or third-party assessments\nWhat We Offer\nCareer Development: Clear growth path with mentorship and training opportunities\nTechnical Training: Comprehensive onboarding on security and compliance frameworks\nCompetitive Compensation: Competitive base salary with regular performance reviews, merit-based appraisals, and bonus opportunities\nGrowth Opportunity: Early-stage company with significant room for career advancement\nRemote-First Culture: Flexibility to work from anywhere while collaborating with a global team\nWork Environment Requirements\nReliable high-speed internet connection.\nQuiet, professional home office setup.\nMust be amenable to work US Eastern Time zone hours.\nFluency in written and verbal English communication skills.\nWorkstreet Is An Equal Opportunity Employer\nAs an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.","description_format":"text","description_chars":6112,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Home office","Professional development"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-09-11T02:41:48Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.355,"p_room":0.28,"age_days":192,"expected_fill_days":42,"reasons":["conf:0","velocity","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/workstreet-senior-grc-engineer-2","json_url":"https://alion.io/job/workstreet-senior-grc-engineer-2.json","meta":{"generated_at":"2026-11-03T03:13:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4302,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686337},"rest":"https://alion.io/mcp/rest/get_company?id=686337"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fworkstreet-senior-grc-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fworkstreet-senior-grc-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fworkstreet-senior-grc-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/workstreet-senior-grc-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fworkstreet-senior-grc-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":700099}},{"tool":"search_jobs","arguments":{"company":"workstreet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":700099},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}