Senior GRC Engineer – Special Programs

Workstreet

. Own primary account relationship management for complex, long-term client accounts .

Posted 10/7/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing complex client relationships and executing cybersecurity compliance projects across SOC 2, ISO 27001, and NIST CSF frameworks. Proven ability to lead teams, develop security policies, and facilitate audits while maintaining exceptional communication with stakeholders.

Highest-signal resume keywords

Cybersecurity Compliance ExperienceClient Relationship ManagementSOC 2 Framework ExpertiseTeam Leadership and MentorshipPolicy Development and Implementation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity ComplianceRisk AssessmentTechnical Security ControlsProject ManagementAudit FacilitationEvidence CollectionPolicy ImplementationCompliance FrameworksMilestone ReviewOperational Leadership

Soft Skills

Exceptional Communication SkillsConflict ResolutionMentorshipProactive CommunicationTeam Collaboration

Tools & Technologies

VantaDrataAutomated GRC Platforms

Certifications & Qualifications

CISACISSPISO 27001 Lead ImplementerSecurity+

Industry Keywords

SOC 2ISO 27001NIST CSFHIPAAPCI DSSCompliance ServicesBig 4 ConsultingRegulatory ComplianceClient Escalation ManagementStandard Operating Procedures

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own primary account relationship management for complex, long-term client accounts
Drive proactive communication, milestone updates, and executive trust
Lead client kickoff meetings and milestone review meetings for yourself and your team
Guide clients through audits, risk assessments, evidence collection, and milestone reviews
Resolve high-stakes client escalations professionally and support long-term client retention
Provide daily operational leadership, feedback, and mentorship to junior analyst pods
Analyze, interpret, and implement technical security controls aligned with SOC 2, ISO 27001, HIPAA, and NIST CSF
Design, roll out, and maintain enterprise cybersecurity policies, procedures, and documentation
Refine internal playbooks, standard operating procedures, and delivery frameworks
Manage active client accounts within the first 15 days
Deliver specialized compliance services for organizations across industries

Requirements

What you’ll need

3+ years of experience directing small analyst pods
3+ years of direct cybersecurity compliance experience with practical execution across SOC 2, ISO 27001, or NIST CSF frameworks
Direct experience owning high-complexity accounts, facilitating difficult conversations, and serving as the primary face of technical engagements
Demonstrated ability to manage multiple complex compliance projects simultaneously
Skilled at creating, implementing, and enforcing corporate security policies
Exceptional written and verbal English communication skills
Experience with SOC 2, ISO 27001, or NIST CSF frameworks
Big 4 or top-tier consulting experience is helpful
Exposure to HIPAA, PCI DSS, or complementary regulatory compliance frameworks is helpful
Hands-on proficiency with Vanta, Drata, or similar automated GRC platforms is helpful
Recognized certifications such as CISA, CISSP, ISO 27001 Lead Implementer, or Security+ are helpful
Experience leading external audits, third-party risk assessments, and auditor evaluations is helpful
Reliable, high-speed internet connection and professional home office environment
Availability to work 8:00 AM–5:00 PM U.S. Eastern Time
Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
Must participate in live video interviews with camera on and verify identity during recruitment and onboarding
Employment contingent upon identity verification and background screening, where permitted by law
Must be authorized to work in the U.S. without visa sponsorship now or in the future

Benefits

Comp & perks

Career development with mentorship and training opportunities
Reimbursement for approved training and certification courses relevant to the current role
Competitive base salary
Regular performance reviews linked to merit-based appraisals
Bonus opportunities
Significant room for career advancement
Remote-first flexibility to work from anywhere while collaborating with a global team