Workstreet

Compliance

• Own primary client relationship management for high-complexity client accounts
• Build executive relationships and deliver clear milestone updates
• Lead bilingual client engagements via phone, email, and video calls in English and Spanish
• Analyze, interpret, and implement technical security requirements aligned with SOC 2, ISO 27001, HIPAA, and NIST CSF
• Direct and develop analyst pods through operational leadership, feedback, and mentorship
• Author and maintain enterprise security policies, standard operating procedures, and audit evidence artifacts
• Manage complex account escalations and resolve difficult client challenges
• Collaborate with internal and client technical teams on risk and gap remediation
• Refine internal playbooks, procedures, and delivery frameworks
• Assume active account ownership and manage client engagements within the first 15 days

Senior GRC Engineer, Bilingual Spanish-English

Manager

• Own the voice, tone, and visual formatting for customer-facing materials, including proposals, contracts, project plans, attestations, and reports
• Review templated and custom customer-facing content to ensure parity between what Workstreet sells, delivers, and communicates
• Manage asset creation and targeted email outreach for current customer accounts
• Partner with Sales, Marketing, and HR to align external assets, website copy, and internal communications with Workstreet standards
• Influence the design of role-relevant training curricula for customer-facing teams and track completion, certifications, and operational effectiveness
• Translate internal policy changes into actionable workflows, templates, and training materials while monitoring adherence
• Oversee revenue tools and leverage Agentic AI to automate asset formatting and maintain template governance
• Review and polish high-visibility internal announcements, newsletters, and stakeholder presentations

Enablement Manager

• Own the voice, tone, and visual formatting of customer-facing materials, including proposals, contracts, project plans, attestations, and reports
• Audit templated and custom customer-facing content for quality and parity between Workstreet’s sales, delivery, and communications
• Manage asset creation and targeted email outreach for current customer accounts
• Partner with Sales, Marketing, and HR to align external assets, website copy, and internal communications with Workstreet standards
• Influence the design of role-relevant training curricula for customer-facing teams and track completion, certifications, and operational effectiveness
• Translate internal policy changes into actionable workflows, templates, and training materials while monitoring adherence
• Oversee revenue tools and leverage Agentic AI to automate asset formatting and maintain template governance
• Review and polish high-visibility internal announcements, newsletters, and stakeholder presentations
• Work cross-functionally as an operational authority within the Business Operations team

Security Operations

• Monitor alerts across EDR, firewall, IPS, WAF, and SIEM platforms in real time
• Triage alerts, prioritize severity, and distinguish true positives under time pressure
• Maintain continuous 24x7 threat monitoring through rotating shifts, including nights, weekends, and holidays
• Conduct deep incident investigations across EDR, network, and cloud log sources
• Determine incident root cause, scope, and indicators of compromise
• Provide incident analysis and containment recommendations to client teams that own response execution
• Tune SIEM correlation rules and detection logic to reduce false positives and close security coverage gaps
• Document investigation findings and incident timelines in case management systems
• Update SOC playbooks and standard operating runbooks
• Partner with GRC engineers and vCISOs to align threat detection with client compliance obligations
• Execute investigation handoffs across shift rotations
• Guide junior analysts on investigative techniques
• Partner directly with client stakeholders to maintain detection coverage around the clock

Security Operations Analyst

• Monitor and triage real-time alerts across EDR, firewall, IPS, WAF, and SIEM platforms
• Prioritize alert severity and distinguish true positives under time pressure
• Maintain continuous 24x7 threat monitoring through rotating shifts, including nights, weekends, and holidays
• Conduct deep incident investigations by correlating EDR, network, and cloud telemetry
• Determine incident root cause, scope, and indicators of compromise
• Provide incident analysis, containment recommendations, and remediation guidance to client teams
• Refine SIEM correlation rules and detection logic to eliminate false positives and close coverage gaps
• Document investigation findings and incident timelines in case management systems
• Update SOC playbooks and standard operating runbooks
• Partner with GRC engineers and vCISOs to align threat detection with client compliance obligations
• Execute investigation handoffs across shift rotations
• Guide junior analysts on investigative techniques
• Partner directly with client stakeholders to maintain strong detection coverage

Engineer

• Complete and submit customer security questionnaires and other due diligence requests
• Serve as the primary responder for customer due diligence requests using established response frameworks, internal policy documentation, and compliance control libraries
• Research and validate responses to client-specific questions outside standard frameworks
• Source supporting evidence from compliance platforms
• Coordinate with internal security and compliance teams to verify response accuracy
• Maintain consistency and quality across deliverables
• Ensure responses use current, approved language and align with customers’ broader security posture
• Flag gaps or outdated documentation
• Process specialized vendor security questionnaires across custom Excel matrices and cloud portals
• Map responses against control domains, risk tiering, and subprocessor ecosystems
• Track assigned tasks and communicate blockers early
• Deliver accurate submissions within compressed turnaround targets

Senior Trust Services Engineer

Cloud Engineer

• Deploy and maintain cloud security controls across AWS, GCP, Azure, and OCI
• Execute architectural risk assessments, identify vulnerabilities and asset exposures, and engineer remediation blueprints
• Configure and manage SIEM, log analytics, identity management, IDS/IPS, and vulnerability management tools
• Own client relationships as the primary trusted advisor for an assigned portfolio
• Establish project milestones, manage communication, and handle technical escalations
• Engineer automated IaC deployment playbooks and security testing infrastructure
• Embed security guardrails into CI/CD pipelines and containerized environments
• Investigate and contain cloud security incidents and execute forensic remediation
• Support audit readiness in GRC platforms such as Vanta by gathering, testing, and validating cloud configuration evidence
• Collaborate with clients and internal teams to strengthen cloud security posture and automate security operations

Cloud Security Engineer – OCI, Oracle Cloud Infrastructure

• Execute end-to-end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards
• Maintain policy and evidence repositories by authoring and updating security policies, standard operating procedures, and control evidence
• Identify, evaluate, track, and remediate cybersecurity risks and control gaps with cross-functional technical teams
• Manage compliance milestones, evidence gathering, task execution, project deliverables, and timelines across concurrent client engagements
• Communicate directly with client stakeholders via email, chat, and video calls
• Gather evidence, clarify control requirements, and share engagement updates
• Perform structured control testing and readiness reviews
• Collaborate with internal IT, security, and operations teams on corrective action plans
• Update delivery templates, playbooks, and standard operating procedures
• Manage active client accounts within the first 15 days
• Serve as the primary point of contact for a portfolio of accounts
• Guide engagements end-to-end and resolve escalations with urgency
• Manage accounts and oversee a pod of analysts across SOC 2, ISO 27001, and NIST CSF frameworks

GRC Engineer I – Special Programs

• Execute end-to-end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards
• Author and update corporate security policies, standard operating procedures, and control evidence for audits and assessments
• Partner with technical teams to track, evaluate, and remediate cybersecurity risks and control gaps
• Track compliance milestones, evidence gathering, and task execution across concurrent client engagements
• Communicate directly with client stakeholders via email, chat, and video calls
• Gather evidence, clarify control requirements, and share engagement updates
• Perform structured control testing and readiness reviews
• Collaborate with IT, security, and operations teams on corrective action plans
• Update delivery templates, playbooks, and standard operating procedures
• Serve as the primary point of contact for a portfolio of accounts
• Guide client engagements end-to-end and resolve escalations
• Manage accounts and oversee a pod of analysts across SOC 2, ISO 27001, and NIST CSF
• Integrate into the organization and manage active client accounts within the first 15 days