Client Assurance, InfoSec GRC

SitusAMC

. Coordinate customer security inquiries, security questionnaires, due diligence requests, and client assurance activities .

Posted 10/15/2026full-timeRemote • United StatesJuniorMid-Level💰 $70,000 - $85,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityServiceNow

About the role

Key responsibilities & impact

Coordinate customer security inquiries, security questionnaires, due diligence requests, and client assurance activities
Manage requests from intake through delivery
Support internal technology audits, control assessments, and tracking of findings and remediation
Triage incoming requests, establish deadlines, set priorities, route questions to SMEs, track progress, and escalate overdue items
Draft responses using approved policies, standards, and previously approved content; route responses for SME validation and approval
Maintain a library of reusable standard responses
Liaise between clients and Information Security by clarifying questions, managing follow-ups and timelines, scheduling meetings, and coordinating audit walkthroughs and onsite client visits
Collect, organize, validate, and package supporting security and compliance evidence
Review outgoing evidence for redaction, confidentiality markings, minimum necessary disclosure, and appropriate scope
Maintain an organized evidence repository with current, approved artifacts
Track client-identified findings, audit findings, external security rating findings, penetration test findings, and corrective action plans
Gather remediation updates and prepare client status responses
Coordinate evidence requests with control owners and track remediation through completion
Support third-party vendor risk assessments as needed
Maintain centralized trackers and request history
Prepare operational metrics and monthly and quarterly status reports for Information Security leadership
Maintain standard operating procedures and identify process-efficiency improvements
Build effective working relationships and handle sensitive information appropriately
Perform other activities assigned by the manager

Requirements

What you’ll need

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent combination of education and relevant experience
2–4 years of industry and/or relevant experience, typically at an Analyst level role or external equivalent
Experience in information security compliance, client assurance, IT audit, or governance, risk, and compliance (GRC)
Experience completing or coordinating security questionnaires, client audits, or evidence requests
Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness
Familiarity with SOC 2, ISO 27001, and NIST CSF
Strong organizational, analytical, problem-solving, and project coordination skills
Strong attention to detail and ability to review documentation and data for completeness and accuracy
Strong written and verbal communication skills
Proficiency with Microsoft Office, specifically Excel, Word, and PowerPoint
Experience preparing reports, dashboards, status updates, and management documentation
Ability to work independently, exercise sound judgment, recognize when guidance or escalation is needed, and maintain confidentiality
Industry certification such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer, or progress toward one
Familiarity with FFIEC, GLBA, or NYDFS Part 500
Experience with GRC, questionnaire automation, or trust center platforms such as Optro, UpGuard, ServiceNow, OneTrust, Whistic, or SafeBase
Exposure to AI governance inquiries or third-party vendor risk assessments

Benefits

Comp & perks

Discretionary bonus eligibility for certain positions
PTO
Paid holidays
Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
401K
Equal Opportunity Employer