Workstreet

Program Manager

• Supervise and coach two Project Managers and their respective Project Coordinators, ensuring performance alignment, collaboration, and professional growth.
• Oversee successful delivery of 15+ concurrent client projects, maintaining clear communication, prioritization, and escalation processes.
• Serve as the Jira and Agile SME—configure workflows, manage sprint cadences, maintain dashboards, and standardize Agile practices across teams.
• Build and manage real-time dashboards and KPIs in Jira, Notion, or other reporting tools to monitor progress, productivity, and team performance.
• Collaborate with Security Analysts, Compliance Specialists, and cross-functional teams to ensure seamless delivery and consistent quality across engagements.
• Identify operational gaps and implement scalable improvements through automation, templates, and standardized documentation.
• Provide timely updates, performance metrics, and risk assessments to the Senior Manager of Trust Services and leadership stakeholders.
• Leverage Slack, Notion, and other collaboration platforms for efficient communication, documentation, and workflow transparency.
• Balance workloads, adjust priorities dynamically, and ensure all projects meet deadlines and quality expectations.
• Oversee global team operations to maintain responsiveness and accountability across multiple time zones.

Auditor

• Validate Compliance Evidence: Review, assess, and verify documentation and control evidence within the GRC platform (Vanta) to confirm alignment with ISO 27001, ISO 42001, HIPAA, and GDPR requirements.
• Conduct Internal Audits: Coordinate internal audits and readiness assessments to identify control gaps and recommend effective remediation actions.
• Communicate Audit Insights: Provide clear, timely updates and expectations to internal teams regarding audit timelines, deliverables, and compliance outcomes.

Internal Auditor

Compliance

• Analyze CMMC and NIST SP 800-171 controls to ensure client compliance with Department of Defense cybersecurity standards.
• Create and manage System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other required CMMC documentation.
• Perform readiness reviews to identify and address control deficiencies for organizations pursuing CMMC certification.
• Partner with clients to close cybersecurity gaps and achieve CMMC Level 1 and Level 2 compliance.
• Support clients through assessments and coordinate activities with Certified Third-Party Assessment Organizations (C3PAOs).
• Oversee multiple client engagements, ensuring milestones and deliverables are met ahead of contract deadlines.
• Mentor and guide a team of compliance professionals to achieve project goals and maintain quality standards.
• Stay informed on CMMC 2.0 developments and DoD cybersecurity policies to ensure client programs remain compliant.

Senior GRC Engineer – CMMC

Technical Product Manager

• Define, maintain, and communicate the product roadmap for your domain.
• Translate company goals into actionable product initiatives with clear impact.
• Partner with engineering leadership to ensure technical feasibility and architectural alignment.
• Prioritize features and backlog items based on customer value, business goals, and technical complexity.
• Drive end-to-end product lifecycle—from concept through release and iteration.
• Write clear Product Requirements Documents (PRDs) and user stories with well-defined acceptance criteria.
• Collaborate with engineering to understand constraints, dependencies, and system design details.
• Simplify complex technical concepts for non-technical stakeholders.
• Participate in system design discussions, API specifications, and integration workflows.
• Evaluate build vs. buy decisions and assess 3rd-party integrations.
• Partner with business stakeholders to define success metrics and KPIs.
• Work closely with design to deliver intuitive, high-impact user experiences.
• Support launch readiness and go-to-market planning with cross-functional teams.
• Act as an internal subject matter expert on product capabilities and tradeoffs.
• Define and track product performance metrics, usage analytics, and reliability indicators.
• Use data and feedback loops to refine priorities and identify optimization opportunities.

Software Engineer

• Develop, write, and maintain policies, procedures, and documentation to support compliance with SOC 2, ISO 27001, and related standards.
• Lead and manage SOC 2 Type 1 and Type 2 implementation projects across multiple clients.
• Implement and monitor technical controls in cloud environments (AWS, GCP, Azure) to ensure security best practices.
• Conduct internal security audits and risk assessments, identifying vulnerabilities and recommending improvements.
• Collaborate cross-functionally with engineering, operations, and client teams to embed compliance and security processes into day-to-day workflows.
• Stay current with regulatory developments, cybersecurity trends, and evolving compliance requirements.
• Operate confidently in compliance platforms such as Drata, Vanta, and SecureFrame.

Manager, GRC Engineering

Executive Assistant

• Manage CISOs complex calendar across multiple time zones using Google Calendar.
• Schedule and coordinate internal and external meetings.
• Optimize meeting flow and minimize calendar conflicts, including mix of travel, in-person, and virtual.
• Prepare meeting agendas and materials as needed.
• Draft after meeting actions and follow-ups based on transcripts or recordings.
• Maintain and update running task lists and priorities.
• Track deadlines and deliverables.
• Coordinate follow-ups on action items.
• Ensure nothing falls through the cracks.
• Check in and status via Slack twice daily (morning and evening in your timezone).
• Execute daily click-through tasks in various SaaS applications: Email - manage and prioritize inbox, draft emails, flag critical items. Slack - monitor groups and channels, flagging items that need attention. Hubspot - add and update records as needed. Monitor and manage shared credential systems securely. Handle routine administrative tasks efficiently.
• Research prospective companies and evaluate fit with Workstreet's ICP.
• Track and analyze security and compliance tools in the market.
• Monitor competitor activities, pricing, and service offerings.
• Research leads and contacts, gathering relevant background information. Stay informed on security trends and emerging threats.
• Research and synthesize compliance frameworks.
• Evaluate and test new AI models and tools for potential business applications.
• Compile research findings into actionable summaries and recommendations.
• Book domestic and international travel arrangements. Manage itineraries, accommodations, and transportation. Handle travel changes and emergency rebooking. Coordinate travel logistics with meeting schedules.
• Assist with social media posting and content scheduling. Monitor and engage with comments and messages. Support LinkedIn thought leadership initiatives. Maintain consistent brand voice across platforms.

• Serve as a trusted advisor to top-tier clients, helping them navigate compliance journeys through strategic guidance, project oversight, and direct client engagement.
• Lead kickoff calls for new VIP clients, addressing technical concerns, aligning goals, and outlining the compliance roadmap.
• Guide clients through frameworks such as SOC 2, ISO 27001, GDPR, and more; support documentation efforts, provide best practices, and ensure timely progress.
• Conduct regular milestone review calls to assess compliance readiness, unblock issues, and align client teams with next steps.
• Deliver expert recommendations based on the latest regulatory trends and security standards; help clients implement scalable and practical compliance strategies.
• Partner with the delivery team to ensure smooth handoffs and execution across engagements.
• Provide hands-on assistance within platforms like Vanta, guiding clients in using automation tools to streamline compliance.
• Monitor regulatory updates and industry best practices to continuously deliver value to clients and internal teams.

VIP Manager – GRC

Account Executive

• Support the full sales cycle within our Startup Segment (0-20 FTE companies) while developing deep expertise in security and compliance frameworks
• Learn and apply technical knowledge: develop expertise in SOC 2, ISO 27001, GDPR, and other compliance frameworks to have meaningful conversations with prospects
• Support the sales process: assist with discovery calls, proposal development while learning to manage deals independently
• Engage with stakeholders: build relationships with security leaders, compliance teams, and technical buyers at growing SaaS companies
• Qualify and nurture leads: identify high-potential prospects and understand their compliance challenges and business needs
• Collaborate with senior team members: shadow senior AEs, learn best practices, and gradually take on more complex deals
• Document and improve processes: help refine our sales playbooks, messaging, and qualification criteria based on your learnings
• Act as a trusted advisor: guide customers through complex buying decisions and solve their compliance challenges

• Analyze and interpret CMMC requirements and NIST SP 800-171 controls to ensure client compliance with Department of Defense cybersecurity standards.
• Develop, implement, and maintain System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other CMMC-required documentation.
• Conduct gap assessments and readiness reviews for organizations pursuing CMMC certification.
• Collaborate with defense contractors to identify and remediate gaps in their cybersecurity programs to meet CMMC Level 1 and Level 2 requirements.
• Guide clients through the CMMC assessment process and coordinate with Certified Third-Party Assessment Organizations (C3PAOs).
• Manage and coordinate multiple CMMC compliance projects across various defense contractors, ensuring timely completion before contract deadlines.
• Lead and mentor a small team of compliance professionals to effectively deliver on CMMC objectives.
• Stay current with evolving CMMC requirements, CMMC 2.0 rulemaking, and DoD cybersecurity policies.

Senior GRC Engineer – Government

Security Engineer

• Embed directly with 7-10 high-growth clients as their fractional CISO, becoming an integral part of their leadership team.
• Architect security solutions, analyze infrastructure, and configure security tools.
• Work side-by-side with client engineering teams to implement security controls and review infrastructure-as-code.
• Provide immediate security guidance via Slack, customer calls, and impromptu consultations.
• Collaborate with GTM teams to unblock deals because of security questionnaires.
• Build deep relationships with CTOs, VPs of Engineering, and founders; participate in daily standups, sprint planning, and engineering discussions.
• Serve as the calm, knowledgeable voice during security incidents and critical decisions.
• Guide clients through SOC 2, ISO 27001, and other certifications; write and review policies, create risk registers, and manage third-party risk.
• Conduct hands-on gap assessments and build remediation roadmaps; work directly with auditors to answer technical questions and provide evidence.
• Review cloud configurations, recommend hardening measures, and evaluate and implement security tools, often doing initial setup.
• Create security runbooks, automation scripts, and provide code-level guidance on secure development practices.
• Focus on direct client engagement and technical leadership rather than people management.

Sr. Manager, Virtual Chief Information Security Officer, vCISO

Sales Operations Manager

• Create and prepare sales contracts using provided templates and pricing guidelines.
• Process signed contracts including downloading, organizing in Google Drive, and updating HubSpot records.
• Complete deal closure processes in HubSpot, ensuring all required fields are accurately populated.
• Maintain data integrity across multiple systems (HubSpot, Streetsmart, Airtable, etc.).
• Create preliminary proposals in Streetsmart (70% completion) for AE final customization.
• Provision new customers in MSP (Vanta) platform and add customer details, frameworks, and company size information.
• Set up user permissions and send admin invitations for Vanta instances.
• Monitor and prevent duplicate deal creation across the CRM.
• Conduct weekly audits to identify companies with contacts but no associated deals.
• Follow detailed SOPs and identify improvement opportunities.
• Collaborate with Account Executives, Customer Success, and Finance teams.
• Report to Revenue Operations Team.

Sales Operations Analyst

• Develop, write, and maintain policies and procedures to ensure compliance with SOC 2, ISO 27001, and other relevant standards
• Manage and execute SOC 2 Type 1 and Type 2 implementation projects
• Implement and oversee technical controls in cloud environments, including AWS, GCP, and Azure
• Direct daily operations of a small team, driving success through effective leadership
• Conduct regular security audits and risk assessments to identify vulnerabilities and ensure continuous improvement of security posture
• Coordinate with different teams to ensure compliance and security best practices are integrated into their workflows
• Stay updated on new regulatory requirements and industry best practices
• Work within and feel comfortable operating compliance platforms like Drata, Vanta, and SecureFrame

Project Manager

• Oversee full lifecycle of security questionnaire projects including planning, execution, monitoring, and delivery
• Identify opportunities to improve efficiency in questionnaire response processes and implement standardized templates and procedures
• Maintain organized documentation of all client questionnaires, responses, and supporting evidence for future reference and continuous improvement
• Create realistic project timelines, track progress against milestones, and proactively address potential delays
• Coordinate internally with security analysts and team members to gather necessary information and ensure consistent, accurate responses
• Ensure timely delivery of high-quality responses while maintaining exceptional client satisfaction

Program Manager

Internal Auditor

Senior GRC Engineer – CMMC

Technical Product Manager

Manager, GRC Engineering

Executive Assistant

VIP Manager – GRC

Account Executive

Senior GRC Engineer – Government

Sr. Manager, Virtual Chief Information Security Officer, vCISO

Sales Operations Analyst

Manager, GRC Engineering

Project Manager, Trust Services