Manager, Trust Services

About this role

About Workstreet At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one. Get to know the Trust Services Team In addition to GRC services, we also have a Trust Services team. We move at a fast, focused, and reliable pace – completing deliverables within 1 to 3 business days for customers with 5 clients and customers with 500 clients. We work directly with our customers’ security and sales points of contact, meaning clarity, teamwork, and problem-solving are at the forefront of everything we do to help our customers drive sales and renewals by using security and compliance as differentiators. If you want to be part of a team that builds the bridge between sales and security, you’re in the right place. The Opportunity We are seeking a highly skilled Manager, Trust Services to lead a global team responsible for reviewing and managing security questionnaires, contractual security clauses, and compliance documentation for SaaS clients. This role bridges cybersecurity, legal, and client engagement — ensuring rapid, accurate, and high-quality turnaround on vendor assessments, NDAs, DPAs, MNDAs, and security-related contract reviews. The ideal candidate will combine deep technical knowledge of security frameworks with strong legal interpretation skills, team leadership experience, and agile delivery expertise. This role requires working US Eastern Time (EST) hours. What you’ll do

Lead and manage a global team - Supervise a team of security analysts and reviewers across multiple time zones. Provide coaching, mentoring, training, and quality assurance oversight to ensure consistent, high-quality outputs.

Oversee security questionnaire completion- Finalize vendor security questionnaires (e.g., SIGs, CAIQs, or custom formats) and collaborate with client SMEs to validate complex technical and product-related responses.

Manage legal reviews & redlining - Collaborate with internal and external legal counsel to redline, comment, and ensure alignment with cybersecurity frameworks and risk posture across NDAs, DPAs, MNDAs, and other contractual security clauses.

Collaborate on AI tooling & development- Utilize AI-powered tools to accelerate first-pass reviews and integrate feedback to improve accuracy and speed.

Drive client engagement and growth - Own the full engagement lifecycle — from onboarding through ongoing delivery — serving as the strategic liaison to build trust, surface expansion opportunities, and turn strong delivery outcomes into deeper, longer-term client relationships.

Collaborate cross-functionally - Partner with Legal, Compliance, IT, and Sales teams across our clients to align responses, ensure contractual compliance, and resolve escalations.

Obsess over process improvement - Identify and implement process enhancements, automation opportunities, and playbook updates to increase efficiency and reduce turnaround time.

Who You Are

Cybersecurity and vendor risk authority - Command 3-5 years of direct execution in cybersecurity operations, legal security reviews, or vendor risk management infrastructure deployment.

Scale-oriented people manager - Driven by a history of leading, coaching, and upskilling distributed or global teams across multiple international regions to achieve operational excellence.

Legal contract and assessment champion - Executed and managed granular redlining, structural commentary, and legal validation for NDAs, DPAs, and MNDAs alongside standardized frameworks like SIG and CAIQ.

Cross-functional business translator - Articulated and aligned intricate engineering, legal, and compliance parameters into clear commercial milestones for diverse internal and external stakeholders.

Surgical technical problem-solver - Applied razor-sharp critical thinking and microscopic attention to detail to isolate, analyze, and resolve dense security and compliance architecture friction.

High-velocity quality guardian - Delivered flawless outputs under compressed, rapid-turnaround timelines while maintaining an uncompromising commitment to data and administrative accuracy.

Growth-centric team mentor - Invested in continuous performance management, merit-based coaching, and clear talent development pathways to foster high accountability and professional growth.

Elite operational communicator - Deliver flawless, authoritative, and professional written and verbal English communication across all internal engineering, legal, and compliance teams.

Global operational anchor - Spearheaded performance continuity and built deep technical relationships within an asynchronous, multi-timezone distributed environment.

What will help you succeed

Professionalcertifications - Hold active, industry-recognized designations such as CC, CompTIA Security+, CISA, CISM, PMP, CISSP.

GRC architecture experience - Directed and mapped complex SaaS security frameworks, specifically SOC 2, ISO 27001, NIST 800-53, GDPR, and HIPAA, into secure enterprise business operations.

Active deployment of AI-assisted review tools - Hands-on optimization and data parsing through generative intelligence engines to help streamline compliance and security operations.

Domain tenure in SaaS or risk consulting - Proven years spent scaling commercial governance within hyper-growth B2B SaaS verticals or top-tier enterprise vendor risk consulting practices.

Mastery of compliance automation tools - Direct backend operational execution across specialized GRC and risk platforms such as Drata, Vanta, OneTrust, Secureframe, or ServiceNow VRM.

What We Offer

Career Development: Clear path with mentorship and…