Jobs at Workstreet

Support clients through FedRAMP authorization, CMMC, and NIST compliance initiatives. Responsibilities include analyzing controls, authoring SSPs and POA&Ms, performing readiness assessments and gap analyses, defining authorization boundaries, managing continuous monitoring, coordinating with CSPs and assessment organizations, and advising defense contractors on CUI and DFARS requirements.

Leads technical pre-sales pursuits for enterprise security, compliance, and GRC services. Conducts discovery, solution scoping, proof-of-concept activities, technical validation, executive briefings, and workshops. Designs client-specific approaches spanning cloud security, compliance frameworks, technology, and operating models. Develops proposals, statements of work, pricing estimates, architecture diagrams, roadmaps, demonstrations, and RFP responses while coordinating sales, delivery, marketing, partners, and client stakeholders.

Leads, coaches, and develops Account Executives selling GRC and security compliance services to early-stage businesses. Owns sales forecasting, pipeline management, scalable sales processes, recruiting, onboarding, training, partner selling, and go-to-market improvements. Builds trusted relationships with founders, technical buyers, and channel partners while driving quota attainment, revenue growth, and customer-focused consultative selling.

Manage and grow auditor-channel partner relationships to generate leads and revenue. Responsibilities include partner prospecting, reviews and QBRs, partner marketing campaigns, lead and revenue forecasting, performance reporting, process development, and collaboration with sales and marketing teams. The role requires GRC and audit market relationships, channel sales experience, solution selling, HubSpot proficiency, strong communication, and occasional local travel.

Own complex client relationships and lead end-to-end cybersecurity compliance engagements across SOC 2, ISO 27001, NIST CSF, HIPAA, and related frameworks. Manage audits, risk assessments, evidence collection, policy development, escalations, and process optimization. Lead and mentor analyst pods while serving as the primary client contact and ensuring successful compliance outcomes.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.