Senior Trust Services Engineer

Accountabilities:: Complete and submit customer security questionnaires and other due diligence requests using established response frameworks, internal policies, and compliance control libraries. Research customer-specific security questions that fall outside standard response frameworks and identify appropriate supporting evidence. Validate responses using compliance platforms, security documentation, and internal resources, coordinating with relevant security and compliance teams when additional verification is required. Ensure all deliverables use current, approved language and accurately reflect the organization’s broader security and compliance posture. Review responses for accuracy, consistency, completeness, and structural quality before submission. Identify gaps, inconsistencies, outdated documentation, or missing evidence and escalate material issues to the appropriate stakeholders. Manage third-party and vendor security questionnaires across Excel-based matrices, cloud portals, and vendor risk management platforms. Map questionnaire responses accurately to relevant security controls, control domains, risk classifications, and subprocessor information. Analyze corporate security policies, technical documentation, compliance resources, and control libraries to extract precise information for customer responses. Collaborate with internal security, compliance, and related teams to verify information and maintain consistency across customer deliverables. Prioritize multiple time-sensitive requests, track workloads and deadlines, and communicate blockers or risks early to maintain service-level commitments. Contribute to reliable, repeatable Trust Services processes that support customer relationships, renewals, and business growth. Requirements: Strong professional experience in information security, GRC, security compliance, third-party risk, trust services, or a closely related field. Foundational knowledge of security and compliance frameworks such as SOC 2, ISO 27001, HIPAA, and GDPR. Understanding of security and privacy concepts including PII versus PHI, authentication, logical access controls, encryption, and related technical safeguards. Ability to interpret dense security policies, control documentation, compliance materials, and technical information and extract accurate answers. Experience responding to security questionnaires, customer due diligence requests, or third-party/vendor risk assessments. Strong attention to detail and the ability to follow established workflows, response standards, and data-entry procedures with consistency. Excellent workload management and prioritization skills, with the ability to execute against demanding turnaround times without compromising accuracy. Strong judgment and decision-making skills when handling ambiguous security questions, with the ability to identify when escalation is necessary. Excellent written and verbal English communication skills, with confidence collaborating with global customers and internal stakeholders. Proactive communication style and the ability to identify blockers, missing information, and potential risks early. Experience with cloud environments and data-hosting architectures, particularly AWS, GCP, or Azure, is beneficial. Experience using compliance automation platforms such as Drata, Vanta, or Secureframe is advantageous. Experience working with vendor risk or security assessment platforms such as OneTrust, ServiceNow, Whistic, UpGuard, or Zip is a plus. Reliable high-speed internet connection and a professional home office environment suitable for confidential work and uninterrupted collaboration. Willingness and ability to work a standard 8:00 AM–5:00 PM US Eastern Time schedule, with occasional flexibility for changing business priorities and global collaboration. Ability to travel locally on occasion for onsite meetings, team gatherings, or business activities when required. Benefits: Fully remote position with the option to work from India. Remote-first culture with collaboration across global teams. Competitive base salary with regular performance reviews and merit-based appraisal opportunities. Potential bonus opportunities. Clear career development pathways supported by mentorship and training. Reimbursement for approved role-related training and certification courses. Opportunity to build practical expertise across security questionnaires, GRC, compliance frameworks, third-party risk, and Trust Services. Exposure to modern compliance automation and vendor risk management platforms. Opportunity to work in a fast-growing environment with significant potential for professional growth. High-impact work directly supporting customer security, compliance, renewals, and business relationships. Structured collaboration with experienced security and compliance professionals.