GRC Engineer – Level I

Workstreet

. Execute end-to-end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards .

Posted 11/9/2026full-timeRemote • PhilippinesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards, while effectively communicating with stakeholders and managing multiple engagements. Proficient in authoring cybersecurity policies and utilizing automated compliance solutions.

Highest-signal resume keywords

SOC 2 ComplianceISO 27001 ComplianceCybersecurity Policy AuthoringAutomated Compliance SolutionsClient Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2ISO 27001NIST CSFControl TestingCybersecurity Risk RemediationEvidence GatheringControl BenchmarksCompliance Milestone TrackingStructured Control TestingRegulatory Standards

Soft Skills

Organizational DisciplineAdaptabilityWritten CommunicationVerbal CommunicationClient Relationship Management

Tools & Technologies

VantaGRC Platforms

Certifications & Qualifications

ISO 27001 Lead ImplementerCISASecurity+

Industry Keywords

GDPRHIPAAPCI DSSCybersecurity ComplianceClient Engagements

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Execute end-to-end client compliance initiatives aligned with SOC 2, ISO 27001, and regulatory standards
Author and update corporate security policies, standard operating procedures, and control evidence for audits and assessments
Partner with technical teams to track, evaluate, and remediate cybersecurity risks and control gaps
Track compliance milestones, evidence gathering, and task execution across concurrent client engagements
Communicate directly with client stakeholders via email, chat, and video calls
Gather evidence, clarify control requirements, and share client updates
Perform structured control testing and readiness reviews
Collaborate with IT, security, and operations teams on corrective action plans
Update delivery templates, playbooks, and standard operating procedures
Manage active client accounts within the first 15 days
Serve as primary point of contact for a portfolio of accounts
Guide engagements end-to-end, resolve escalations, and oversee a pod of analysts

Requirements

What you’ll need

Proven ability to communicate directly with U.S. clients
Strong organizational discipline to manage multiple cybersecurity compliance engagements simultaneously
Hands-on execution experience across SOC 2, ISO 27001, or NIST CSF frameworks within tech-focused cybersecurity environments
Practical familiarity authoring, rolling out, and enforcing enterprise cybersecurity policies and control benchmarks
Ability to thrive in a fast-paced startup setting and adapt to shifting priorities
Outstanding written and verbal English communication skills
Practical exposure to automated compliance solutions such as Vanta or similar GRC platforms
Practical familiarity with GDPR, HIPAA, or PCI DSS
Recognized certification such as ISO 27001 Lead Implementer, CISA, or Security+
Reliable high-speed internet connection
Professional home office environment supporting confidential conversations and uninterrupted collaboration
Ability to work 8:00 AM–5:00 PM U.S. Eastern Time
Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
Must participate in live video interviews with camera on
Must verify identity during recruitment and onboarding
Successful completion of identity verification and background screening, where permitted by law
Fluency in written and verbal English communication

Benefits

Comp & perks

Career development with mentorship and training opportunities
Reimbursement for approved training and certification courses relevant to the current role
Competitive base salary
Regular performance reviews linked to merit-based appraisals
Bonus opportunities
Significant room for career advancement
Remote-first culture
Flexibility to work from anywhere while collaborating with a global team