Trust Services Engineer

Get to know the Trust Services Team

In addition to GRC services, we also have a Trust Services team. We move at a fast, focused, and reliable pace – completing deliverables within 1 to 3 business days for customers with 5 clients and customers with 500 clients. We work directly with our customers’ security and sales points of contact, meaning clarity, teamwork, and problem-solving are at the forefront of everything we do to help our customers drive sales and renewals by using security and compliance as differentiators.

If you want to be part of a team that builds the bridge between sales and security, you’re in the right place.

Workstreet is looking for a results-oriented Trust Services Engineer to support our Trust Services team. Your primary responsibility will be to complete customer security questionnaires and other due diligence requests. Your work will be reviewed by Senior Engineers and Managers, giving you exposure to on-the-job feedback. This role is primarily focused on efficiently and accurately entering information from our customers’ existing compliance resources into standardized responses.

• Complete and submit security questionnaires - serve as the primary responder for customer due diligence requests, leveraging established response frameworks, internal policy documentation, and compliance control libraries to deliver accurate, on-time submissions.
• Research and validate responses - dig into client-specific questions that fall outside standard frameworks, sourcing supporting evidence from compliance platforms and coordinating with internal security and compliance teams to verify accuracy before submission.
• Maintain consistency and quality across all deliverables - ensure every response reflects current, approved language and aligns with the customer’s broader security posture; flag gaps or outdated documentation when identified.
• Collaborate with internal teams - coordinate with compliance and security teams to verify information and ensure consistency across all submissions.

• High-velocity SLA executor
  - Driven by time-sensitive deliverables and compressed turnaround targets, executing rapid data entry and technical responses without compromising quality.
• Decisive risk navigator
  - Handles ambiguous security queries by making definitive, justifiable choices, utilizing sharp communication to escape critical data gaps rather than operating on guesswork.
• Proactive workflow coordinator
  - Commands strong workload prioritization instincts, systematically tracking assigned tasks and communicating blockers early to keep production lines moving.
• Precision process guardian
  - Applies exceptional attention to detail and absolute structural discipline when executing established response workflows and data entry procedures.
• Technical policy parser
  - Sharp ability to deconstruct dense corporate security policies, internal control libraries, and technical documentation to extract precise, accurate answers for client portfolios.
• Third-party risk specialist
  - Directly processes specialized vendor security questionnaires across custom Excel matrices and cloud portals, mapping responses accurately against control domains, risk tiering, and subprocessor ecosystems.
• Foundational GRC analyst
  - Grounded in core information security frameworks (SOC 2, ISO 27001, HIPAA, GDPR), data definitions (PII vs. PHI), and technical security controls like authentication, logical access, and encryption.

• Structural grasp of cloud environments
  - Baseline exposure to cloud infrastructure architectures and data hosting environments, specifically AWS, GCP, or Azure.
• Operation of compliance automation engines
  - Direct execution or data mapping within automated compliance platforms such as Drata, Vanta, or Secureframe.
• Hands-on management of vendor risk portals
  - Prior deployment or response logging inside enterprise vendor risk management systems, including One Trust, Service Now, Whistic, UpGuard, or Zip.

• Career Development:
  Clear path with mentorship and training opportunities.
• Role-Related Training:
  Reimbursement for the successful completion of approved training and…