Client Assurance & InfoSec GRC Specialist

SitusAMC; Carson City (NV); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and holidays

401K plan

Medical/dental/vision insurance

Job summary

SitusAMC is seeking a mid-level information security compliance professional to manage client assurance activities, evidence collection, and audit support. You will coordinate between GRC, security, and product teams to deliver timely, accurate responses to client inquiries and audit requests.

Responsibilities include maintaining evidence repositories, tracking findings and CAPs, and producing reports for leadership. A background in risk, security controls, and regulatory frameworks is preferred.

Qualifications

• Bachelor’s or Associate degree in a related field or equivalent combination of education and experience.
• 2-4 years in information security compliance, client assurance, IT audit or GRC.
• Experience completing or coordinating security questionnaires and evidence requests.
• Knowledge of IAM, vulnerability management, cloud security, incident response.

Responsibilities

• Serve as primary intake for client due diligence questionnaires and security topics.
• Draft responses using approved content and route for SME validation.
• Coordinate with multiple teams to obtain accurate responses and evidence.
• Maintain an organized evidence repository and trackers.
• Track findings and remediation progress for audits and third-party risk.
• Prepare operational metrics and status reports for leadership.

Skills

Cybersecurity

GRC

Communication

Project coordination

Education

Bachelors/Assoc degree

Tools

MS Office

OneTrust

ServiceNow

Job description

SitusAMC is seeking a mid-level information security compliance professional to manage client assurance activities, evidence collection, and audit support. You will coordinate between GRC, security, and product teams to deliver timely, accurate responses to client inquiries and audit requests.

Responsibilities include maintaining evidence repositories, tracking findings and CAPs, and producing reports for leadership. A background in risk, security controls, and regulatory frameworks is preferred.