Install Virtualbox with a virtual windows inside. Join and use THAT virtual Windows for work. Install work software only inside the VM. That will keep everything inside/outside of the vm compartmentalized. I use this approach on my Linux only PC. More than because of compatibility with Windows, I rather do this than give unknown work software full access to my hard drive.
GrapheneOS, then. It’s still cumbersome switching between those profiles.