Workstreet
Manager, GRC Engineering
Remote (United States)
Sponsorship not specified$171k-$800kDetected 6 days ago
CybersecurityPenetration TestingIncident ResponseCompliancePerformance ManagementHIPAALeadershipCommunicationMentoring
About the role
- The successful candidate will be able to come up to speed quickly, integrate into the organization, and take on clients within your first 30 days.
- You will serve as the dedicated virtual CISO for a portfolio of clients, owning strategic security relationships end-to-end, guiding risk and compliance decisions with authority, and ensuring every client can count on you as a security expert.
Responsibilities
- Client Relationship Management Own the vCISO Relationship: Serve as the dedicated virtual CISO for a portfolio of clients, building deep, trusted relationships and operating with the authority and credibility of an embedded security executive.
- Lead Client Engagements: Guide clients through security program development and compliance initiatives end-to-end, from initial assessment through certification, providing strategic direction, proactive risk guidance, and executive-level communication at every milestone.
- Be a Trusted Advisor: Understand each client's business, technology, risk appetite, and compliance drivers deeply enough to deliver specific, contextualized security guidance, not generic recommendations.
- Lead Risk & Compliance Oversight: Lead risk assessments, risk register development, and treatment planning.
- Develop Client Security Programs: Build and mature security programs for early-stage clients and optimize existing programs for more mature organizations.
- Develop customized policies, controls, and compliance roadmaps that reflect each client's actual technology and business model.
- Deliver Advanced Security Strategy: Produce architecture recommendation memoranda with trade-off analysis, vulnerability disclosure assessments, threat modeling exercises, and executive security briefings.
- Support security hire interviews, contract reviews, and bug bounty SOP development.
- Monitor Regulatory Developments: Stay informed on evolving regulations and frameworks to maintain the relevance and accuracy of compliance controls.
- Leverage GRC platforms such as Vanta, Drata, and SecureFrame to maintain continuous audit readiness.
Requirements
- You must be able to speak fluently about their architecture, controls, and compliance posture without notes.
- Must be amenable to working US Time zone hours.
Nice to have
- Who You Are 8+ years of experience in information security, with at least 3 years in a senior security leadership role Demonstrated experience managing client relationships directly
- able to translate technical risk into business language without losing precision
- 8+ years of experience in information security, with at least 3 years in a senior security leadership role Demonstrated experience managing client relationships directly
Skills
- Advise C-suite and board-level stakeholders on security posture, risk tolerance, and investment priorities.
- Comprehensive onboarding on security and compliance frameworks
- Fluency in written and verbal English communication skills.
Compensation
- A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
- Manage Compliance Operations: Facilitate quarterly access reviews, annual penetration testing engagements, and annual tabletop exercises for incident response and business continuity.
Benefits
- Team Members: Coach junior team members, share domain expertise, and contribute to a culture of continuous learning.
- Quiet, professional home office setup.
Company info
- Early-stage company with significant room for career advancement.
- Flexibility to work from anywhere while collaborating with a global team.
- Work Environment Requirements Reliable high-speed internet connection.
- Workstreet Is An Equal Opportunity Employer As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals.
- All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.
Apply directly at Workstreet →Create a free account for alerts like thisView Workstreet immigration profile
This listing is sourced directly from Workstreet's careers page and normalized into a canonical job model.