Teams at Workstreet

Lead federal compliance engagements for clients pursuing FedRAMP and NIST certifications. Own strategic advisory, gap assessments, FedRAMP 20x readiness, OSCAL/JSON/YAML machine-readable artifacts, CCM continuous monitoring integrations, and third-party assessment orchestration while mentoring a small compliance team and maintaining executive client relationships.

Lead client-facing GRC engagements end-to-end, manage escalations, advise on compliance strategy, coach a pod of 3–5 analysts, architect technical security controls across SOC 2/ISO 27001/HIPAA/PCI DSS, execute multi-cloud certification projects, and use automation platforms (Drata, Vanta, Secureframe).

Serve as a virtual CISO for a client portfolio: build executive relationships, lead security program and compliance roadmaps (SOC 2, ISO 27001, NIST, HIPAA, CMMC), guide risk assessments and remediation, represent clients in high-stakes calls, manage 3–5 analysts, leverage GRC platforms (Vanta/Drata/SecureFrame), and support practice development and pre-sales.