GRC Engineer I

Workstreet
Philippines
Workplace: RemoteFull timeFunction: Legal, Risk & ComplianceSkills: ["Organizational skills","Written communication","Verbal communication","Client-facing communication","Customer-first focus"]

Support foundational governance, risk, and compliance programs by assisting with the design, implementation, and maintenance of cybersecurity initiatives aligned to SOC 2, ISO 27001, and regulatory standards. Update audit-ready documentation, perform control testing and readiness reviews, and track security risks to drive remediation. Coordinate client deliverables and evidence collection directly with client contacts under senior engineering guidance, while partnering across IT, engineering, and operations to strengthen security postures.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Workstreet
Workstreet
2 days ago

GRC Engineer I

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live
Reposted: similar role first listed 7 months ago

Job Summary

Support foundational governance, risk, and compliance programs by assisting with the design, implementation, and maintenance of cybersecurity initiatives aligned to SOC 2, ISO 27001, and regulatory standards. Update audit-ready documentation, perform control testing and readiness reviews, and track security risks to drive remediation. Coordinate client deliverables and evidence collection directly with client contacts under senior engineering guidance, while partnering across IT, engineering, and operations to strengthen security postures.
Location: Philippines
Workplace: Remote
Employment Type: Full time
Job Function: Legal, Risk & Compliance
Seniority: Entry level

Key Responsibilities

  • •Assist in designing, implementing, and maintaining cybersecurity initiatives aligned to SOC 2, ISO 27001, and regulatory standards.
  • •Create and update compliance documentation, policies, procedures, and audit-ready control evidence baselines.
  • •Isolate and track security risks, coordinating with engineering teams to implement remediation plans.
  • •Coordinate documentation, client tracking matrices, and delivery timelines under senior engineering guidance.
  • •Engage clients to collect evidence, clarify control requirements, and provide transparent status updates.
Travel: Low travel

Pay and Benefits

Perks:Remote WorkLearning Budget

Key Requirements

  • •Support the design, implementation, and maintenance of cybersecurity compliance programs aligned to SOC 2 and ISO 27001.
  • •Formulate and maintain compliance documentation and organize audit-ready control evidence.
  • •Track security risks and collaborate with internal/external teams to close technical gaps and drive remediation.
  • •Coordinate cross-functional compliance project tasks, baselines, client tracking, and delivery timelines.
  • •Strong English communication skills to translate complex technical control requirements into clear documentation.
Experience:CybersecurityGRCInformation security
Skills:Organizational skillsWritten communicationVerbal communicationClient-facing communicationCustomer-first focus
Certifications:ISO 27001 Lead ImplementerCISACompTIA Security+
Languages:English
Tech Stack:Vanta

Company Brief

Workstreet
Operates an online recruitment platform connecting employers with job seekers, offering job listings, candidate sourcing tools, and employer branding solutions to streamline hiring and talent acquisition processes for small to medium-sized businesses.
Industry: HR Tech
Website