Senior Trust Services Engineer

• →Complete and submit security questionnaires - serve as the primary responder for customer due diligence requests, leveraging established response frameworks, internal policy documentation, and compliance control libraries to deliver accurate, on-time submissions.
• →Research and validate responses - dig into client-specific questions that fall outside standard frameworks, sourcing supporting evidence from compliance platforms and coordinating with internal security and compliance teams to verify accuracy before submission.
• →Maintain consistency and quality across all deliverables - ensure every response reflects current, approved language and aligns with the customer’s broader security posture; flag gaps or outdated documentation when identified.
• →Collaborate with internal teams - coordinate with compliance and security teams to verify information and ensure consistency across all submissions.

• High-velocity SLA executor - Driven by time-sensitive deliverables and compressed turnaround targets, executing rapid data entry and technical responses without compromising quality.
• Decisive risk navigator - Handles ambiguous security queries by making definitive, justifiable choices, utilizing sharp communication to escalate critical data gaps rather than operating on guesswork.
• Proactive workflow coordinator - Commands strong workload prioritization instincts, systematically tracking assigned tasks and communicating blockers early to keep production lines moving.
• Precision process guardian - Applies exceptional attention to detail and absolute structural discipline when executing established response workflows and data entry procedures.
• Technical policy parser - Sharp ability to deconstruct dense corporate security policies, internal control libraries, and technical documentation to extract precise, accurate answers for client portfolios.
• Third-party risk specialist - Directly processes specialized vendor security questionnaires across custom Excel matrices and cloud portals, mapping responses accurately against control domains, risk tiering, and subprocessor ecosystems.
• Foundational GRC analyst - Grounded in core information security frameworks (SOC 2, ISO 27001, HIPAA, GDPR), data definitions (PII vs. PHI), and technical security controls like authentication, logical access, and encryption.

• Structural grasp of cloud environments - Baseline exposure to cloud infrastructure architectures and data hosting environments, specifically AWS, GCP, or Azure.
• Operation of compliance automation engines - Direct execution or data mapping within automated compliance platforms such as Drata, Vanta, or Secureframe.
• Hands-on management of vendor risk portals - Prior deployment or response logging inside enterprise vendor risk management systems, including OneTrust, ServiceNow, Whistic, UpGuard, or Zip.

• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
• A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM US Eastern Time (ET) to effectively support hiring managers, candidates, and cross-functional teams. Occasional flexibility to adjust working hours is expected to accommodate changing business priorities, global collaboration, and time-sensitive hiring needs.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

• Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.
• Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.