Workstreet

Manager, GRC Engineering

Workstreet

full-time

Posted on:

Origin:  • 🇺🇸 United States

Visit company website
AI Apply
Apply

Job Level

Mid-LevelSenior

Tech Stack

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

  • Develop, write, and maintain policies and procedures to ensure compliance with SOC 2, ISO 27001, and other relevant standards
  • Manage and execute SOC 2 Type 1 and Type 2 implementation projects
  • Implement and oversee technical controls in cloud environments, including AWS, GCP, and Azure
  • Direct daily operations of a small team, driving success through effective leadership
  • Conduct regular security audits and risk assessments to identify vulnerabilities and ensure continuous improvement of security posture
  • Coordinate with different teams to ensure compliance and security best practices are integrated into their workflows
  • Stay updated on new regulatory requirements and industry best practices
  • Work within and feel comfortable operating compliance platforms like Drata, Vanta, and SecureFrame

Requirements

  • Bachelor’s degree in Information Technology, Cybersecurity, or a related field
  • 5+ years managing a small team
  • Proven experience in managing compliance programs and familiarity with SOC 2 and ISO 27001 frameworks
  • Strong knowledge and experience in implementing technical controls in cloud platforms like AWS, GCP, and Azure
  • Excellent communication and writing skills in English
  • Ability to work independently with a strong sense of initiative
  • Must be amenable to work US Eastern Time zone hours
  • Preferred: Relevant certifications (e.g., CISA, CISSP, CISM)
  • Preferred: Experience in conducting security training and awareness programs
  • Preferred: Familiarity with other compliance frameworks and regulations (e.g., GDPR, HIPAA)