Workstreet

IT Support

• Own the new hire IT onboarding journey—create accounts, configure access permissions, set up collaboration tools, and deliver an exceptional first-day experience.
• Manage offboarding by securely revoking access, assisting with data transitions, and coordinating closely with HR to ensure secure and smooth exits.
• Serve as the first point of contact for IT-related issues, including password resets, MFA troubleshooting, access requests, and general support inquiries.
• Maintain and optimize company account and license management systems (e.g., Google Workspace, Microsoft 365, SSO/SAML tools).
• Collaborate with cross-functional teams to document, refine, and streamline IT workflows and escalation procedures.
• Facilitate IT-related training, including security awareness and onboarding resources, when needed.

IT Specialist

Account Executive

• Manage the end-to-end sales process to educate prospects, scope solutions, and drive revenue
• Help prospects understand their compliance challenges and how Workstreet can solve them
• Work directly with CEOs, CISOs, CTOs, and compliance teams at high-growth SaaS companies
• Shape sales strategy, messaging, and product offerings.

Senior Account Executive

Manager

• Supervise a team of security analysts and reviewers across multiple time zones
• Provide coaching, mentoring, training, and quality assurance oversight to ensure consistent, high-quality outputs
• Oversee the completion, review, and finalization of client and vendor security questionnaires (SIG, CAIQ, or custom formats)
• Collaborate with SMEs to validate technical and compliance responses
• Conduct and manage reviews of NDAs, DPAs, MNDAs, and other contractual security clauses
• Collaborate with internal and external legal counsel to redline, comment, and ensure alignment with cybersecurity frameworks and risk posture
• Utilize AI-powered tools to accelerate first-pass reviews and integrate SME feedback to improve accuracy and speed
• Implement agile practices (Scrum or Kanban) to manage workload distribution, track SLAs, and drive continuous improvement through retrospectives and sprint planning
• Serve as a key liaison for clients, ensuring clear communication of review findings, timelines, and recommendations
• Participate in professional engagements with legal, procurement, and security teams
• Partner with Legal, Compliance, IT, and Sales teams to align responses, ensure contractual compliance, and resolve escalations
• Identify and implement process enhancements, automation opportunities, and playbook updates to increase efficiency and reduce turnaround time

Trust Services Manager

Security Engineer

• Build and Lead the Cloud Security Engineering Team : Recruit, mentor, and develop cloud security engineers across varying skill levels, fostering a culture of technical excellence and continuous improvement.
• Oversee Cloud Security Delivery : Manage the planning, scoping, implementation, and delivery of cloud security engagements including architecture reviews, security automation, and compliance implementations.
• Quality Assurance & Technical Review : Review cloud security architectures, infrastructure-as-code implementations, and security automation workflows to ensure they meet industry standards and client requirements.
• Resource Planning & Allocation : Balance team capacity across client engagements, internal R&D projects, and professional development initiatives while maintaining high-quality service delivery.
• Client Advisory & Relationship Management : Serve as the primary technical point of contact for cloud security clients, translating complex security and compliance requirements into practical, scalable cloud architectures for technical and executive audiences.
• Cloud Security Program Development : Design and implement cloud security frameworks, reference architectures, standard operating procedures, and automation playbooks aligned with compliance requirements (SOC 2, CMMC, FedRAMP, ISO 27001, HIPAA).
• Scoping & Solution Architecture : Lead technical scoping discussions, design cloud security solutions, define implementation roadmaps, estimate effort, and contribute to proposal development for new cloud security opportunities.
• Cross-Functional Collaboration : Partner with sales, compliance, and engineering teams to deliver integrated security solutions that align with client needs and organizational growth objectives.
• Maintain Technical Leadership : Stay current with emerging cloud security technologies, threat landscapes, compliance requirements, and industry best practices through hands-on engineering and continuous research.
• Architect and oversee development of infrastructure-as-code (IaC) frameworks, security automation pipelines, and compliance-as-code solutions using Terraform, CloudFormation, Python, and CI/CD integration.
• Cloud Security Architecture : Design multi-cloud security architectures incorporating Zero Trust principles, identity-centric security models, network segmentation, encryption strategies, and defense-in-depth controls.
• Contribute to cloud security research, develop technical content, present at conferences or webinars, and establish Workstreet as a recognized authority in cloud security engineering.

Cloud Security Engineer – Manager

• Lead and Manage Global Team: Supervise a team of security analysts and reviewers across multiple time zones. Provide coaching, mentoring, training, and quality assurance oversight to ensure consistent, high-quality outputs
• Security Questionnaire Review: Oversee the completion, review, and finalization of client and vendor security questionnaires (SIG, CAIQ, or custom formats). Collaborate with SMEs to validate technical and compliance responses
• Legal Document Review & Redlining: Conduct and manage reviews of NDAs, DPAs, MNDAs, and other contractual security clauses. Collaborate with internal and external legal counsel to redline, comment, and ensure alignment with cybersecurity frameworks and risk posture
• AI & SME Collaboration: Utilize AI-powered tools to accelerate first-pass reviews and integrate SME feedback to improve accuracy and speed
• Agile Leadership: Implement agile practices (Scrum or Kanban) to manage workload distribution, track SLAs, and drive continuous improvement through retrospectives and sprint planning
• Client Engagement: Serve as a key liaison for clients, ensuring clear communication of review findings, timelines, and recommendations. Participate in professional engagements with legal, procurement, and security teams
• Cross-Functional Collaboration: Partner with Legal, Compliance, IT, and Sales teams to align responses, ensure contractual compliance, and resolve escalations
• Process Improvement: Identify and implement process enhancements, automation opportunities, and playbook updates to increase efficiency and reduce turnaround time

Manager, Trust Services

QA Engineer

• Conduct Penetration Tests : Perform comprehensive security assessments across web, mobile, network, and system environments to uncover vulnerabilities.
• Identify and Document Vulnerabilities : Analyze findings, assess impact, and produce detailed reports with clear remediation recommendations.
• Collaborate on Remediation : Work with engineering and operations teams to validate fixes and strengthen overall system security.
• Execute Social Engineering Assessments : Test human security awareness through phishing, pretexting, and related simulations.
• Develop Testing Tools and Methods : Create and refine scripts, tools, and methodologies to enhance testing accuracy and coverage.
• Support Incident Response : Assist in investigations and provide technical expertise during threat containment and remediation.
• Stay Current with Threat Landscape : Continuously monitor emerging exploits, attack techniques, and best practices in offensive security.
• Contribute to Security Awareness : Participate in internal training and help improve organizational security policies and standards.

Penetration Tester

Software Engineer

• Develop, write, and maintain policies and procedures to ensure compliance with SOC 2, ISO 27001, and other relevant standards
• Manage and execute SOC 2 Type 1 and Type 2 implementation projects
• Implement and oversee technical controls in cloud environments, including AWS, GCP, and Azure
• Direct daily operations of a small team, driving success through effective leadership
• Conduct regular security audits and risk assessments to identify vulnerabilities and ensure continuous improvement of security posture
• Coordinate with different teams to ensure compliance and security best practices are integrated into their workflows
• Stay updated on new regulatory requirements and industry best practices
• Work within and feel comfortable operating compliance platforms like Drata, Vanta, and SecureFrame

Manager, GRC Engineering

Program Manager

• Supervise and coach two Project Managers and their respective Project Coordinators, ensuring performance alignment, collaboration, and professional growth.
• Oversee successful delivery of 15+ concurrent client projects, maintaining clear communication, prioritization, and escalation processes.
• Serve as the Jira and Agile SME—configure workflows, manage sprint cadences, maintain dashboards, and standardize Agile practices across teams.
• Build and manage real-time dashboards and KPIs in Jira, Notion, or other reporting tools to monitor progress, productivity, and team performance.
• Collaborate with Security Analysts, Compliance Specialists, and cross-functional teams to ensure seamless delivery and consistent quality across engagements.
• Identify operational gaps and implement scalable improvements through automation, templates, and standardized documentation.
• Provide timely updates, performance metrics, and risk assessments to the Senior Manager of Trust Services and leadership stakeholders.
• Leverage Slack, Notion, and other collaboration platforms for efficient communication, documentation, and workflow transparency.
• Balance workloads, adjust priorities dynamically, and ensure all projects meet deadlines and quality expectations.
• Oversee global team operations to maintain responsiveness and accountability across multiple time zones.

Auditor

• Validate Compliance Evidence: Review, assess, and verify documentation and control evidence within the GRC platform (Vanta) to confirm alignment with ISO 27001, ISO 42001, HIPAA, and GDPR requirements.
• Conduct Internal Audits: Coordinate internal audits and readiness assessments to identify control gaps and recommend effective remediation actions.
• Communicate Audit Insights: Provide clear, timely updates and expectations to internal teams regarding audit timelines, deliverables, and compliance outcomes.

Internal Auditor

Compliance

• Analyze CMMC and NIST SP 800-171 controls to ensure client compliance with Department of Defense cybersecurity standards.
• Create and manage System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other required CMMC documentation.
• Perform readiness reviews to identify and address control deficiencies for organizations pursuing CMMC certification.
• Partner with clients to close cybersecurity gaps and achieve CMMC Level 1 and Level 2 compliance.
• Support clients through assessments and coordinate activities with Certified Third-Party Assessment Organizations (C3PAOs).
• Oversee multiple client engagements, ensuring milestones and deliverables are met ahead of contract deadlines.
• Mentor and guide a team of compliance professionals to achieve project goals and maintain quality standards.
• Stay informed on CMMC 2.0 developments and DoD cybersecurity policies to ensure client programs remain compliant.

Senior GRC Engineer – CMMC

Technical Product Manager

• Define, maintain, and communicate the product roadmap for your domain.
• Translate company goals into actionable product initiatives with clear impact.
• Partner with engineering leadership to ensure technical feasibility and architectural alignment.
• Prioritize features and backlog items based on customer value, business goals, and technical complexity.
• Drive end-to-end product lifecycle—from concept through release and iteration.
• Write clear Product Requirements Documents (PRDs) and user stories with well-defined acceptance criteria.
• Collaborate with engineering to understand constraints, dependencies, and system design details.
• Simplify complex technical concepts for non-technical stakeholders.
• Participate in system design discussions, API specifications, and integration workflows.
• Evaluate build vs. buy decisions and assess 3rd-party integrations.
• Partner with business stakeholders to define success metrics and KPIs.
• Work closely with design to deliver intuitive, high-impact user experiences.
• Support launch readiness and go-to-market planning with cross-functional teams.
• Act as an internal subject matter expert on product capabilities and tradeoffs.
• Define and track product performance metrics, usage analytics, and reliability indicators.
• Use data and feedback loops to refine priorities and identify optimization opportunities.

• Develop, write, and maintain policies, procedures, and documentation to support compliance with SOC 2, ISO 27001, and related standards.
• Lead and manage SOC 2 Type 1 and Type 2 implementation projects across multiple clients.
• Implement and monitor technical controls in cloud environments (AWS, GCP, Azure) to ensure security best practices.
• Conduct internal security audits and risk assessments, identifying vulnerabilities and recommending improvements.
• Collaborate cross-functionally with engineering, operations, and client teams to embed compliance and security processes into day-to-day workflows.
• Stay current with regulatory developments, cybersecurity trends, and evolving compliance requirements.
• Operate confidently in compliance platforms such as Drata, Vanta, and SecureFrame.

Executive Assistant

• Manage CISOs complex calendar across multiple time zones using Google Calendar.
• Schedule and coordinate internal and external meetings.
• Optimize meeting flow and minimize calendar conflicts, including mix of travel, in-person, and virtual.
• Prepare meeting agendas and materials as needed.
• Draft after meeting actions and follow-ups based on transcripts or recordings.
• Maintain and update running task lists and priorities.
• Track deadlines and deliverables.
• Coordinate follow-ups on action items.
• Ensure nothing falls through the cracks.
• Check in and status via Slack twice daily (morning and evening in your timezone).
• Execute daily click-through tasks in various SaaS applications: Email - manage and prioritize inbox, draft emails, flag critical items. Slack - monitor groups and channels, flagging items that need attention. Hubspot - add and update records as needed. Monitor and manage shared credential systems securely. Handle routine administrative tasks efficiently.
• Research prospective companies and evaluate fit with Workstreet's ICP.
• Track and analyze security and compliance tools in the market.
• Monitor competitor activities, pricing, and service offerings.
• Research leads and contacts, gathering relevant background information. Stay informed on security trends and emerging threats.
• Research and synthesize compliance frameworks.
• Evaluate and test new AI models and tools for potential business applications.
• Compile research findings into actionable summaries and recommendations.
• Book domestic and international travel arrangements. Manage itineraries, accommodations, and transportation. Handle travel changes and emergency rebooking. Coordinate travel logistics with meeting schedules.
• Assist with social media posting and content scheduling. Monitor and engage with comments and messages. Support LinkedIn thought leadership initiatives. Maintain consistent brand voice across platforms.

• Serve as a trusted advisor to top-tier clients, helping them navigate compliance journeys through strategic guidance, project oversight, and direct client engagement.
• Lead kickoff calls for new VIP clients, addressing technical concerns, aligning goals, and outlining the compliance roadmap.
• Guide clients through frameworks such as SOC 2, ISO 27001, GDPR, and more; support documentation efforts, provide best practices, and ensure timely progress.
• Conduct regular milestone review calls to assess compliance readiness, unblock issues, and align client teams with next steps.
• Deliver expert recommendations based on the latest regulatory trends and security standards; help clients implement scalable and practical compliance strategies.
• Partner with the delivery team to ensure smooth handoffs and execution across engagements.
• Provide hands-on assistance within platforms like Vanta, guiding clients in using automation tools to streamline compliance.
• Monitor regulatory updates and industry best practices to continuously deliver value to clients and internal teams.

VIP Manager – GRC

• Support the full sales cycle within our Startup Segment (0-20 FTE companies) while developing deep expertise in security and compliance frameworks
• Learn and apply technical knowledge: develop expertise in SOC 2, ISO 27001, GDPR, and other compliance frameworks to have meaningful conversations with prospects
• Support the sales process: assist with discovery calls, proposal development while learning to manage deals independently
• Engage with stakeholders: build relationships with security leaders, compliance teams, and technical buyers at growing SaaS companies
• Qualify and nurture leads: identify high-potential prospects and understand their compliance challenges and business needs
• Collaborate with senior team members: shadow senior AEs, learn best practices, and gradually take on more complex deals
• Document and improve processes: help refine our sales playbooks, messaging, and qualification criteria based on your learnings
• Act as a trusted advisor: guide customers through complex buying decisions and solve their compliance challenges

• Analyze and interpret CMMC requirements and NIST SP 800-171 controls to ensure client compliance with Department of Defense cybersecurity standards.
• Develop, implement, and maintain System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), and other CMMC-required documentation.
• Conduct gap assessments and readiness reviews for organizations pursuing CMMC certification.
• Collaborate with defense contractors to identify and remediate gaps in their cybersecurity programs to meet CMMC Level 1 and Level 2 requirements.
• Guide clients through the CMMC assessment process and coordinate with Certified Third-Party Assessment Organizations (C3PAOs).
• Manage and coordinate multiple CMMC compliance projects across various defense contractors, ensuring timely completion before contract deadlines.
• Lead and mentor a small team of compliance professionals to effectively deliver on CMMC objectives.
• Stay current with evolving CMMC requirements, CMMC 2.0 rulemaking, and DoD cybersecurity policies.

Senior GRC Engineer – Government

• Embed directly with 7-10 high-growth clients as their fractional CISO, becoming an integral part of their leadership team.
• Architect security solutions, analyze infrastructure, and configure security tools.
• Work side-by-side with client engineering teams to implement security controls and review infrastructure-as-code.
• Provide immediate security guidance via Slack, customer calls, and impromptu consultations.
• Collaborate with GTM teams to unblock deals because of security questionnaires.
• Build deep relationships with CTOs, VPs of Engineering, and founders; participate in daily standups, sprint planning, and engineering discussions.
• Serve as the calm, knowledgeable voice during security incidents and critical decisions.
• Guide clients through SOC 2, ISO 27001, and other certifications; write and review policies, create risk registers, and manage third-party risk.
• Conduct hands-on gap assessments and build remediation roadmaps; work directly with auditors to answer technical questions and provide evidence.
• Review cloud configurations, recommend hardening measures, and evaluate and implement security tools, often doing initial setup.
• Create security runbooks, automation scripts, and provide code-level guidance on secure development practices.
• Focus on direct client engagement and technical leadership rather than people management.

Sr. Manager, Virtual Chief Information Security Officer, vCISO

Sales Operations Manager

• Create and prepare sales contracts using provided templates and pricing guidelines.
• Process signed contracts including downloading, organizing in Google Drive, and updating HubSpot records.
• Complete deal closure processes in HubSpot, ensuring all required fields are accurately populated.
• Maintain data integrity across multiple systems (HubSpot, Streetsmart, Airtable, etc.).
• Create preliminary proposals in Streetsmart (70% completion) for AE final customization.
• Provision new customers in MSP (Vanta) platform and add customer details, frameworks, and company size information.
• Set up user permissions and send admin invitations for Vanta instances.
• Monitor and prevent duplicate deal creation across the CRM.
• Conduct weekly audits to identify companies with contacts but no associated deals.
• Follow detailed SOPs and identify improvement opportunities.
• Collaborate with Account Executives, Customer Success, and Finance teams.
• Report to Revenue Operations Team.

Sales Operations Analyst

Project Manager

• Oversee full lifecycle of security questionnaire projects including planning, execution, monitoring, and delivery
• Identify opportunities to improve efficiency in questionnaire response processes and implement standardized templates and procedures
• Maintain organized documentation of all client questionnaires, responses, and supporting evidence for future reference and continuous improvement
• Create realistic project timelines, track progress against milestones, and proactively address potential delays
• Coordinate internally with security analysts and team members to gather necessary information and ensure consistent, accurate responses
• Ensure timely delivery of high-quality responses while maintaining exceptional client satisfaction

IT Specialist

Senior Account Executive

Trust Services Manager

Cloud Security Engineer – Manager

Manager, Trust Services

Penetration Tester

Manager, GRC Engineering

Program Manager

Internal Auditor

Senior GRC Engineer – CMMC

Technical Product Manager

Manager, GRC Engineering

Executive Assistant

VIP Manager – GRC

Account Executive

Senior GRC Engineer – Government

Sr. Manager, Virtual Chief Information Security Officer, vCISO

Sales Operations Analyst

Manager, GRC Engineering

Project Manager, Trust Services