GRC Engineer I

About Workstreet At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of frameworks—including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP—empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one. The Opportunity We are seeking a highly motivated and detail-oriented GRC Engineer I to join our fast-growing team. The ideal candidate will have a solid background in cybersecurity compliance frameworks such as SOC 2, ISO 27001, and NIST CSF. This role requires strong communication skills and the ability to manage multiple cybersecurity compliance projects simultaneously. The successful candidate will also have experience overseeing or managing a small team, while ensuring client engagements are delivered effectively and aligned with Workstreet ’s security objectives. What You'll Do Support Compliance Initiatives : Assist in implementing and maintaining cybersecurity compliance programs aligned with SOC 2, ISO 27001, and other regulatory standards. Maintain Documentation : Develop and update cybersecurity policies, procedures, and control evidence to support audits and assessments. Assist in Risk Mitigation : Work with internal and external teams to identify, track, and help remediate cybersecurity risks and control gaps. Coordinate Project Tasks: Support multiple compliance projects by managing documentation, timelines, and deliverables under senior guidance. Communicate with Clients : Engage with clients via email, chat, and calls to gather evidence, clarify compliance requirements, and provide timely updates. Perform Control Testing : Conduct basic control checks and assist in readiness reviews to ensure continuous compliance with internal and external standards. Collaborate Cross-Functionally : Partner with IT, security, and operations tea