GRC Engineer I (Special Programs)

Workstreet
Philippines
Workplace: RemoteFull timeFunction: Communications, PR & CommunitySkills: ["Client communication","Organizational discipline","Risk mitigation","Professionalism","Written communication"]

Deliver end-to-end client GRC engagements by implementing and maintaining security compliance programs aligned to SOC 2, ISO 27001, and NIST CSF. Maintain and update policy and evidence repositories for audits, assess technical risks and control gaps, and manage compliance deliverables across concurrent client accounts. Serve as primary client contact, perform control testing and readiness reviews, and collaborate cross-functionally to drive remediation and continuously scale delivery processes.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Workstreet
Workstreet
2 days ago

GRC Engineer I (Special Programs)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 3 hours agoStatus: Live

Job Summary

Deliver end-to-end client GRC engagements by implementing and maintaining security compliance programs aligned to SOC 2, ISO 27001, and NIST CSF. Maintain and update policy and evidence repositories for audits, assess technical risks and control gaps, and manage compliance deliverables across concurrent client accounts. Serve as primary client contact, perform control testing and readiness reviews, and collaborate cross-functionally to drive remediation and continuously scale delivery processes.
Location: Philippines
Workplace: Remote
Employment Type: Full time
Job Function: Communications, PR & Community
Seniority: Entry level

Key Responsibilities

  • •Execute end-to-end client compliance initiatives by implementing and maintaining security compliance programs aligned to SOC 2, ISO 27001, and regulatory standards.
  • •Maintain policy and evidence repositories by authoring and updating security policies, SOPs, and control evidence to support audits and assessments.
  • •Identify and mitigate technical risks by partnering with cross-functional technical teams to track, evaluate, and remediate control gaps.
  • •Manage project deliverables by tracking compliance milestones and evidence gathering across multiple concurrent client engagements under senior guidance.
  • •Perform control testing and readiness reviews and lead direct client communications to gather evidence, clarify control requirements, and share updates; collaborate on remediation plans.
Travel: Low travel

Pay and Benefits

Perks:Remote WorkLearning Budget

Key Requirements

  • •Ability to engage directly with U.S. clients professionally and manage executive-level communication across channels.
  • •Strong organizational discipline to deliver multiple cybersecurity compliance engagements simultaneously.
  • •Hands-on experience executing SOC 2, ISO 27001, or NIST CSF programs in tech-focused cybersecurity environments.
  • •Practical familiarity authoring, rolling out, and enforcing enterprise cybersecurity policies and control benchmarks.
  • •Excellent written and verbal English communication skills for technical and executive interactions.
Experience:GRCCybersecurity
Skills:Client communicationOrganizational disciplineRisk mitigationProfessionalismWritten communication
Certifications:ISO 27001 Lead ImplementerCISASecurity+
Languages:English
Tech Stack:SOC 2ISO 27001NIST CSFVantaGDPRHIPAAPCI DSSCMMCNIST 800-171NIST 800-53FedRAMP

Company Brief

Workstreet
Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.
Industry: HR Tech
Website