Client Assurance- InfoSec GRC

Jobgether; United States; Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

Remote work

Paid time off

Health insurance

401(k) retirement plan

Discretionary bonus

Job summary

Jobgether seeks a Client Assurance – InfoSec GRC specialist to coordinate client security questionnaires, due diligence, and audits. You will liaise with Information Security, Legal, Product, and business teams to ensure accurate, timely responses and strong client trust.

Responsibilities include managing evidence, remediation tracking, and audit readiness while safeguarding sensitive information. This role emphasizes governance, risk, and compliance across cloud and on‑premises environments.

Qualifications

• Bachelor’s or associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• 2–4 years in information security compliance, GRC, or IT audit.
• Experience coordinating client security questionnaires (SIG/CAIQ) and audits.
• Knowledge of IAM, vulnerability management, cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.

Responsibilities

• Coordinate client assurance requests including security questionnaires and due diligence assessments.
• Manage response workflows with deadlines and SME assignments.
• Draft and validate security responses using approved policies and content.
• Collect and organize security evidence and documentation.
• Review materials for confidentiality and redaction before sharing.
• Support audits, remediation tracking, and evidence status updates.
• Track findings, external ratings, and risk-related issues for clients.
• Maintain trackers and evidence repositories; prepare reports for leadership.
• Expand reusable response libraries and improve cross‑department collaboration.

Skills

IAM

Vulnerability management

Cloud security

Incident response

Security awareness

Education

Associate degree

Bachelor’s degree

Tools

Optro

UpGuard

ServiceNow

OneTrust

Whistic

SafeBase

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Client Assurance – InfoSec GRC based in the United States. This role offers an exciting opportunity to strengthen client trust and support information security governance, risk, and compliance initiatives within a dynamic, technology-driven environment. You will coordinate client security questionnaires, due diligence requests, audits, and cybersecurity assessments from initial intake through final delivery. Working closely with Information Security, Technology, Legal, Product, and business teams, you will ensure that responses are accurate, timely, and aligned with internal policies and regulatory expectations. You will also manage security evidence, monitor remediation activities, and support audit readiness while safeguarding sensitive information. The position combines cybersecurity knowledge, stakeholder coordination, and process improvement to enhance transparency and operational efficiency. This is an excellent opportunity for a detail-oriented professional seeking to develop their expertise in information security assurance and GRC while contributing to strong client relationships.

Accountabilities

• Manage client assurance requests: Coordinate incoming security questionnaires, due diligence assessments, cybersecurity-related RFPs and RFIs, and specialized inquiries covering topics such as cloud security, AI governance, and vulnerability management.
• Coordinate response workflows: Prioritize requests, establish deadlines, assign questions to subject matter experts, monitor progress, follow up on outstanding items, and elevate delays when necessary.
• Prepare and validate security responses: Draft clear, accurate answers using approved policies, standards, and existing content, ensuring all responses receive the appropriate technical review and approval before delivery.
• Manage security evidence and documentation: Collect, organize, and maintain supporting materials, including policies, procedures, penetration testing summaries, security training records, architecture documentation, API information, and configuration evidence.
• Protect sensitive information: Review documentation before sharing to ensure appropriate redaction, confidentiality markings, and minimum necessary disclosure, escalating concerns about sensitive data when required.
• Support audits and remediation tracking: Coordinate internal technology audits and control assessments, document findings, monitor corrective action plans, and follow up with remediation owners until issues are resolved.
• Monitor client-identified findings: Track audit observations, external security ratings, penetration testing findings, and other risk-related issues while preparing accurate status updates for clients.
• Maintain reporting and operational visibility: Keep centralized trackers and evidence repositories up to date, monitor request volumes and completion timelines, and prepare monthly and quarterly reports for Information Security leadership.
• Improve processes and collaboration: Maintain standard operating procedures, expand reusable response libraries, reduce repetitive requests to technical teams, and build effective working relationships across departments and regions.
• Provide additional GRC support: Contribute to third‑party risk assessments and other information security initiatives as needed, while maintaining professional communication and strict confidentiality.

Requirements

• Education: Associate or bachelor's degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related discipline, or an equivalent combination of education and relevant professional experience.
• Professional experience: Approximately 2–4 years of relevant experience in information security compliance, client assurance, IT audit, governance, risk, and compliance (GRC), or a comparable analytical role. Experience in financial services or professional services is preferred.
• Client assurance expertise: Practical experience completing or coordinating security questionnaires, such as SIG or CAIQ, managing client audits, collecting evidence, maintaining request trackers, and ensuring deliverables are completed on time.
• Information security knowledge: Working knowledge of key security domains, including identity and access management (IAM), vulnerability management, application and cloud security, incident response, and security awareness.
• Framework familiarity: Understanding of established security and assurance frameworks, particularly SOC 2, ISO 27001, and the NIST Cybersecurity Framework.
• Organizational and analytical skills: Strong attention to detail, critical thinking, problem‑solving, and project coordination abilities, with the capacity to manage multiple requests, competing priorities, and tight deadlines.
• Communication and stakeholder management: Excellent written and verbal communication skills, including the ability to translate technical information into clear, client‑friendly responses and collaborate effectively with technical and non‑technical stakeholders across different organizational levels and geographic regions.
• Reporting and technical proficiency: Proficiency in Microsoft Excel, Word, and PowerPoint, with experience preparing operational reports, dashboards, management updates, and supporting documentation.
• Professional judgment and confidentiality: Ability to work independently within established policies and controls, assess documentation for completeness and accuracy, identify potential issues, elevate concerns appropriately, and handle sensitive client, employee, security, and risk information responsibly.

Preferred Qualifications

• Industry certifications such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer, or active progress toward a relevant certification.
• Familiarity with financial services regulatory and compliance expectations, including FFIEC guidance, the Gramm–Leach–Bliley Act (GLBA), and NYDFS Cybersecurity Regulation (23 NYCRR 500).
• Experience using GRC, security questionnaire automation, or trust center platforms such as Optro, UpGuard, ServiceNow, OneTrust, Whistic, or SafeBase.
• Exposure to AI governance‑related client inquiries and third‑party or vendor risk assessments.

Benefits

• Annual base salary: $70,000–$85,000, depending on relevant experience, education, skills, training, geographic location, and market conditions.
• Potential bonus: Eligibility for a discretionary bonus may apply depending on the position, applicable bonus program guidelines, and management approval.
• Remote work: Fully remote position based in the United States.
• Paid time off: Paid time off (PTO) and paid holidays, subject to applicable company policies.
• Healthcare coverage: Access to medical, dental, and vision insurance plans.
• Financial protection: Life insurance and disability insurance options.
• Retirement planning: Access to a 401(k) retirement savings plan.
• Professional development: Opportunities to expand expertise in cybersecurity assurance, governance, risk management, compliance, and audit coordination through hands‑on experience and cross‑functional collaboration.