Workstreet

Account Executive

• Own the full sales cycle — manage deals independently from discovery through proposal, contracting, and close.
• Run a high-volume motion — manage 30-40 opportunities per month while consistently closing 10-15+ deals per month.
• Grow assigned partner relationships — own specific partner accounts, deepening those relationships over time and driving co-sell pipeline and revenue through them.
• Develop technical expertise — build deep knowledge in SOC 2, ISO 27001, GDPR, and other compliance frameworks to have meaningful, consultative conversations with prospects.
• Engage key stakeholders — build relationships with security leaders, compliance teams, and technical buyers at growing mid-market companies.
• Stay ahead of your pipeline — respond quickly, stay organized, and proactively drive deals forward rather than waiting on prospects.
• Collaborate and improve — contribute to refining our sales playbooks, messaging, and qualification criteria based on what you're learning in the field.

Account Executive – Growth

Operations

• Direct partner contract creation and management, using approved templates and commercial pricing guidelines to compile 20–30 highly accurate customer agreements daily.
• Own the post-execution contract lifecycle, systematically downloading, organizing, and archiving signed legal agreements within secure Google Drive repositories.
• Execute high-velocity deal closure workflows within HubSpot and Airtable, ensuring all required operational fields are populated and validated.
• Maintain complete system data integrity across integrated platforms, including HubSpot, StreetSmart, Airtable, and active partner networks.
• Drive strict processing turnaround SLAs, managing 10–15 new deals daily, processing standard contract requests within 2 business hours, and routing sprint deals end-to-end within 15 minutes.
• Deliver targeted technical platform support, guiding customer administrators through platform onboarding, framework selections, and company size configurations.
• Administer tenant user access permissions, managing administrative configurations and initiating user invitations inside Vanta platform instances.
• Perform systematic database audits and data hygiene checks, conducting weekly reviews to prevent duplicate records and isolate unassociated company contacts.

Partnership Operations Analyst

• Direct partner contract creation and management , using approved templates and commercial pricing guidelines to compile 20–30 highly accurate customer agreements daily.
• Own the post-execution contract lifecycle , systematically downloading, organizing, and archiving signed legal agreements within secure Google Drive repositories.
• Execute high-velocity deal closure workflows within HubSpot and Airtable, ensuring all required operational fields are populated and validated.
• Maintain complete system data integrity across integrated platforms, including HubSpot, StreetSmart, Airtable, and active partner networks.
• Drive strict processing turnaround SLAs , managing 10–15 new deals daily, processing standard contract requests within 2 business hours, and routing sprint deals end-to-end within 15 minutes.
• Deliver targeted technical platform support , guiding customer administrators through platform onboarding, framework selections, and company size configurations.
• Administer tenant user access permissions , managing administrative configurations and initiating user invitations inside Vanta platform instances.
• Perform systematic database audits and data hygiene checks , conducting weekly reviews to prevent duplicate records and isolate unassociated company contacts.

• Own the Full Sales Cycle: Manage deals independently from discovery through close, with support from senior team members as needed
• Develop Technical Expertise: Build deep knowledge in SOC 2, ISO 27001, GDPR, and other compliance frameworks to have meaningful, consultative conversations with prospects
• Engage Key Stakeholders: Build relationships with security leaders, compliance teams, and technical buyers at growing SaaS companies
• Build and Qualify Pipeline: Identify high-potential prospects, understand their compliance challenges, and drive urgency around solving them
• Collaborate and Improve: Contribute to refining our sales playbooks, messaging, and qualification criteria based on what you're learning in the field

Account Executive – Early Stage

• Own the Full Sales Cycle: Manage deals independently from discovery through close across a high-volume pipeline
• Partner Channel Management: Proactively manage and develop relationships within our partner channel to maintain consistent lead flow
• Discovery & Proposal Delivery: Run structured discovery calls, accurately scope managed service engagements, and deliver proposals tailored to each client's situation
• Executive & Technical Stakeholder Engagement: Engage with technical and executive buyers — CTOs, CISOs, CEOs, Heads of Engineering and Compliance
• Pipeline Hygiene & Forecasting: Maintain clean pipeline hygiene and forecast accurately
• Develop Technical Expertise: Build deep knowledge in SOC 2, ISO 27001, GDPR, and other compliance frameworks to have meaningful, consultative conversations with prospects
• Collaborate and Improve: Contribute to refining our sales playbooks, messaging, and qualification criteria based on what you're learning in the field

Account Executive – EMEA

Engineer

• Orchestrate Vulnerability Scanning Infrastructure: Configure, schedule, and maintain authenticated credentials, scan policies, and asset groups across client networks and cloud-native environments using enterprise platforms (Tenable/Nessus, Qualys, Rapid7 InsightVM, and Vanta).
• Execute Threat Analysis and Risk Prioritization: Evaluate raw scan outputs and filter false positives; apply advanced risk-based prioritization data utilizing CVSS base scores, EPSS real-time exploit indices, global threat intelligence feeds, and critical client asset contexts.
• Drive Collaborative Remediation and Governance: Translate technical vulnerabilities into clear, actionable architectural guidance and patch-management workflows; partner directly inside the trenches with client software engineers and IT teams to multi-thread remediation efforts and accelerate their sub-30-day time-to-remediate velocity.
• Manage Exceptions and Audit Compliance: Document, verify, and track formal client requests for temporary vulnerability exceptions or long-term risk acceptances; map operational patching data directly to control evidence required for regulatory audits (SOC 2, ISO 27001, HIPAA, CMMC, and NIST).
• Own the Advisory Client Experience: Act as the strategic primary point of contact and trusted security advisor for an assigned portfolio of fast-growth startups; deliver regular project milestones, handle high-priority technical escalations with calm professionalism, and generate regular status reports and executive summaries that communicate technical risk as clear business value.

Vulnerability Management Engineer

Cloud Engineer

• Implement Cloud Security Controls : Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards.
• Assess Cloud Environments : Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations.
• Deploy and Manage Security Tools : Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
• Support Compliance Initiatives : Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation.
• Automate Security Operations : Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls.
• Conduct Cloud Security Reviews : Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
• Collaborate with Engineering Teams : Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
• Assist in Incident Response : Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
• Communicate with Clients : Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Cloud Security Engineer

Affiliate Manager

• Own full-cycle recruiting - from intake through offer acceptance for technical and business-critical roles, with a strong focus on cybersecurity, GRC, compliance, engineering, and other strategic functions.
• Partner closely with hiring managers and business leaders.
• Build and execute proactive sourcing strategies.
• Lead candidate assessment and interview management.
• Drive offer strategy and negotiations.
• Provide talent market intelligence.
• Maintain recruiting excellence.
• Champion continuous improvement.

Talent Partner

Engineering Manager

• Client Relationship Management: Own the vCISO Relationship: Serve as the dedicated virtual CISO for a portfolio of clients, building deep, trusted relationships and operating with the authority and credibility of an embedded security executive.
• Lead Client Engagements: Guide clients through security program development and compliance initiatives end-to-end, from initial assessment through certification, providing strategic direction, proactive risk guidance, and executive-level communication at every milestone.
• Represent Clients on Prospect and Customer Calls: Join your clients’ sales and due diligence calls as their CISO, answering technical security questions in real-time with specificity and confidence.
• Handle Escalations with Professionalism: Resolve complex client issues and escalations with urgency and composure, owning decisions and making security calls independently without deferring every judgment call.
• Be a Trusted Advisor: Understand each client’s business, technology, risk appetite, and compliance drivers deeply enough to deliver specific, contextualized security guidance, not generic recommendations.
• Maintain Client Mastery: Attend every weekly sync, review GRC platform results in business context, track architecture changes and upcoming projects, and proactively identify emerging risks before they surface in routine discussions.
• Provide Strategic Security Leadership: Develop and maintain each client’s security program roadmap, aligned to their business objectives and applicable compliance frameworks.
• Advise C-suite and board-level stakeholders on security posture, risk tolerance, and investment priorities.
• Lead Risk & Compliance Oversight: Lead risk assessments, risk register development, and treatment planning. Guide clients through SOC 2 (Type I/II), ISO 27001, ISO 42001, HIPAA, CMMC, NIST CSF/800-171, GDPR, CCPA, DORA, NYDFS, and other applicable frameworks.
• Develop Client Security Programs: Build and mature security programs for early-stage clients and optimize existing programs for more mature organizations.
• Develop customized policies, controls, and compliance roadmaps that reflect each client’s actual technology and business model.
• Deliver Advanced Security Strategy: Produce architecture recommendation memoranda with trade-off analysis, vulnerability disclosure assessments, threat modeling exercises, and executive security briefings.
• Support security hire interviews, contract reviews, and bug bounty SOP development.
• Monitor Regulatory Developments: Stay informed on evolving regulations and frameworks to maintain the relevance and accuracy of compliance controls.
• Manage Compliance Operations: Facilitate quarterly access reviews, annual penetration testing engagements, and annual tabletop exercises for incident response and business continuity.
• Leverage GRC platforms such as Vanta, Drata, and SecureFrame to maintain continuous audit readiness.
• Manage and Develop a Pod of Analysts: Lead a team of 3–5 analysts through coaching, mentorship, and performance management, fostering accountability, quality, and professional growth.
• Drive Consistent Delivery: Ensure the team meets deadlines and delivers high-quality work across all active client engagements, stepping in to support where needed.
• Contribute to Practice Development: Refine vCISO playbooks, templates, and service delivery standards to improve consistency and quality across the practice.
• Mentor and Support Team Members: Coach junior team members, share domain expertise, and contribute to a culture of continuous learning.
• Support Pre-Sales: Participate in pre-sales conversations to scope vCISO engagements and support proposal development.

Manager, GRC Engineering

• Own a New Market: Be the first dedicated seller for LATAM — building the territory, pipeline, and regional playbook from the ground up
• Be a Great Partner: Serve as the primary relationship owner for an assigned group of Vanta Account Executives, building trusted partnerships, driving referral generation, supporting joint customer opportunities, and expanding Workstreet's footprint within the Vanta partner ecosystem.
• Run the Full Sales Cycle: Manage deals independently from discovery through close across LATAM and the US, with support from senior leaders as needed
• Generate Your Own Pipeline: Blend inbound demand with proactive outbound to identify and develop high-potential prospects in an emerging market
• Develop Technical Expertise: Build deep knowledge in SOC 2, ISO 27001, GDPR, and other frameworks to have meaningful, consultative conversations with technical buyers
• Engage Key Stakeholders: Build relationships with security leaders, compliance teams, and technical buyers at growing SaaS companies across the Americas
• Shape the GTM Motion: Help define our LATAM messaging, qualification criteria, and sales playbooks based on what you learn in the field — your feedback directly shapes how we expand

Account Executive – Growth

Partnership Operations Analyst

Partnership Operations Analyst

Account Executive – Early Stage

Account Executive – EMEA

Vulnerability Management Engineer

Vulnerability Management Engineer

Cloud Security Engineer

Talent Partner

Manager, GRC Engineering

Account Executive – LATAM