Jobs at Workstreet

Lead operational delivery for Special Programs, managing 30–40 consultants via 4–5 managers. Own program health, timelines, quality standards, capacity planning, escalations, and executive client relationships. Coach first-line managers, perform performance management, review deliverables for technical rigor, and mitigate delivery risks to ensure client satisfaction across multiple compliance frameworks.

Own Workstreet’s marketing strategy and execution as its first marketing hire. Develop positioning, messaging, case studies, sales collateral, events, content, demand-generation programs, and market intelligence. Manage external agencies, freelancers, and channel partners while coordinating with sales, executives, and subject-matter experts. The role focuses on B2B SaaS marketing within cybersecurity and GRC, using HubSpot and external partners to accelerate growth.

Guide SaaS providers, federal organizations, and defense contractors through FedRAMP, CMMC, and NIST compliance initiatives. Responsibilities include analyzing controls, authoring SSPs and POA&Ms, conducting readiness assessments and gap analyses, defining authorization boundaries, managing continuous monitoring, coordinating CSPs and assessment teams, and advising clients on CUI, DFARS, and federal authorization requirements.

The role involves overseeing cybersecurity compliance projects, managing teams, ensuring quality standards, and engaging with clients on compliance matters.

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.