Senior Manager, GRC Engineering – Special Programs

Workstreet

Senior Manager managing GRC Engineering at Workstreet, driving compliance and security programs while leading a team of consultants.

Posted 7/31/2026full-timeRemote • 🇺🇸 United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity compliance frameworks, including SOC 2, ISO 27001, and NIST CSF, while effectively managing executive client relationships and leading mid-sized teams to ensure operational excellence and accountability.

Highest-signal resume keywords

Cybersecurity Compliance ExpertiseTeam LeadershipClient Relationship ManagementEnterprise Cybersecurity Policy ImplementationGRC Delivery Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2ISO 27001NIST CSFGDPRHIPAAPCI DSSHITRUSTNIST 800-171CMMCCybersecurity Policy Authoring

Soft Skills

CoachingMentoringPerformance ManagementEscalation ResolutionAccountability

Certifications & Qualifications

CISACISSPCISMISO 27001 Lead ImplementerCRISC

Industry Keywords

Managed Security Service ProviderConsulting OrganizationQuality AssuranceRisk MitigationOperational Delivery Standards

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Assume end-to-end program ownership - take total accountability for Special Programs delivery health, client satisfaction metrics, and cross-functional team execution.
Lead executive-level escalation resolution - serve as the primary escalation authority for high-risk engagements, partnering with managers to resolve complex issues and restore client trust.
Maintain delivery and timeline tracking - monitor portfolio-wide engagement milestones, identify slipping schedules early, and proactively unblock teams to protect project deadlines.
Enforce operational delivery standards - uphold established quality benchmarks and engagement playbooks across all teams, holding managers accountable to consistent execution.
Manage capacity and resource allocation - track workload distribution across direct reports, flag bandwidth risks to executive leadership early, and ensure optimal staffing across engagements.
Direct and develop first-line managers - coach and mentor 4 to 5 direct-report managers to foster a culture of strict accountability, ownership, and operational consistency.
Drive team performance management - establish clear delivery expectations, conduct performance evaluations, recognize high performers, and address execution gaps directly.
Oversee quality assurance and risk mitigation - review client deliverables and communications across key accounts to guarantee accuracy, technical rigor, and alignment with client business objectives.

Requirements

What you’ll need

8+ years of cybersecurity compliance experience across frameworks such as SOC 2, ISO 27001, and NIST CSF.
5+ years of experience leading mid-sized teams.
Extensive experience managing executive client relationships.
8+ years of cybersecurity compliance expertise across SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, HITRUST, and NIST 800-171 or CMMC frameworks.
8+ years of hands-on experience authoring, implementing, and enforcing enterprise cybersecurity policies.
Active professional certifications such as CISA, CISSP, CISM, ISO 27001 Lead Implementer, or CRISC.
Proven track record managing GRC delivery functions within a managed security service provider or specialized consulting organization.
Must be authorized to work in the U.S. without the need for visa sponsorship now or in the future.

Benefits

Comp & perks

Career Development: Clear growth path with mentorship and training opportunities.
Technical Training: Comprehensive onboarding on security and compliance frameworks.
Competitive Compensation: Competitive base salary with regular performance reviews, merit-based appraisals, and bonus opportunities.
Growth Opportunity: Early-stage company with significant room for career advancement.
Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.