Client Assurance & InfoSec GRC Specialist

SitusAMC; Salem (OR); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision insurance

Life and disability insurance

401K plan

Job summary

SitusAMC is seeking a mid-level Information Security/Compliance professional to coordinate client due diligence, manage evidence requests, and prepare status updates for leadership.

The role involves drafting responses, liaising with SMEs, and maintaining a centralized evidence repository to support timely audit activities and third-party risk assessments. Remote-friendly with opportunities in security governance.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field, or equivalent
• 2-4 years of industry or relevant experience in information security compliance, client assurance, IT audit, or GRC
• Experience coordinating security questionnaires (SIG, CAIQ) and client audits, with trackers and follow-through
• Knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness
• Familiarity with SOC 2, ISO 27001, and NIST CSF frameworks
• Strong written and verbal communication for client audiences and cross-functional collaboration

Responsibilities

• Serve as primary intake point for client security due diligence and questionnaires
• Coordinate evidence requests with multiple teams to obtain accurate responses and attestations
• Draft responses using approved content and route for SME validation
• Manage evidence repository and ensure proper redaction and confidentiality
• Track findings and remediation status across audits and CAPs
• Support third-party risk assessments as needed
• Prepare operational metrics and status reports for Information Security leadership
• Maintain standard operating procedures and improve reusable responses

Skills

Analytical skills

Organizational skills

Communication skills

Project coordination

Microsoft Office

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity

Tools

GRC platforms

ServiceNow

OneTrust

Whistic

Optro

Job description

SitusAMC is seeking a mid-level Information Security/Compliance professional to coordinate client due diligence, manage evidence requests, and prepare status updates for leadership.

The role involves drafting responses, liaising with SMEs, and maintaining a centralized evidence repository to support timely audit activities and third-party risk assessments. Remote-friendly with opportunities in security governance.