Senior GRC Engineer; Bilingual Spanish-English

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting‑edge security and compliance programs. As a fast‑growing startup, we specialize in a wide range of frameworks—including SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP—empowering companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Our GRC Engineering team is the primary point of contact for Workstreet's clients. We bring deep framework compliance knowledge and program management to each engagement to ensure our clients' compliance goals are met. Our teammates are trusted advisors not only in the compliance space, but also operationally in the role of vCISO. We deliver quickly using common templates and methodologies and are adept at creative problem‑solving.

GRC Engineering Team members also listen for and act as a centralized resource to advise clients on Workstreet's other service offerings to support their compliance, privacy, and information security goals.

Workstreet is seeking a highly motivated, detail‑oriented Bilingual Senior GRC Engineer to join our fast‑growing team. Acting as a trusted compliance advisor, this role focuses on delivering exceptional client experiences, cultivating trust across complex accounts, and leading successful program outcomes. In this capacity, you will oversee and mentor a team of junior analysts while applying deep technical expertise across frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF.

The successful candidate will integrate quickly into the organization, assuming active account ownership and managing client engagements within their first 15 days. Serving as a high‑touch, bilingual strategic interface for English and Spanish‑speaking client accounts, you will lead end‑to‑end compliance initiatives, resolve complex escalations with composure, and ensure every partner remains deeply engaged, highly satisfied, and retained long term during U.S. Eastern Time business hours.

• Own primary client relationship management – act as the dedicated primary contact for high‑complexity client accounts, building strong executive relationships and delivering clear milestone updates.
• Lead bilingual client engagements – engage directly with U.S. and international client teams via phone, email, and video calls in English and Spanish to address compliance concerns and provide expert guidance.
• Execute multi‑framework compliance architectures – analyze, interpret, and implement technical security requirements aligned with SOC 2, ISO 27001, HIPAA, and NIST CSF.
• Direct and develop analyst pods – provide day‑to‑day operational leadership, constructive feedback, and mentorship to junior analysts to foster high performance and delivery quality.
• Author and maintain compliance documentation – design, implement, and maintain enterprise security policies, standard operating procedures, and audit evidence artifacts.
• Manage complex account escalations – resolve difficult client challenges swiftly and professionally, utilizing solution‑oriented communication to protect client retention.
• Collaborate on risk and gap remediation – partner with internal and client technical teams to identify, assess, track, and mitigate security risks and control deficiencies.
• Drive operational process improvement – continuously refine internal playbooks, standard operating procedures, and delivery frameworks to strengthen organizational efficiency.

• Experienced client relationship lead – proven track record of owning high‑complexity accounts, leading client meetings, and serving as the primary face of technical engagements.
• Fluent…