InfoSec GRC — Client Assurance Specialist

SitusAMC; Lincoln (NE); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision

401K plan

Job summary

SitusAMC is seeking a professional to coordinate client assurance and security questionnaires, gather evidence, and support audit activities. You will liaise with GRC, Security Operations, IAM, and other teams to obtain accurate responses and artifacts.

Ideal candidates have 2–4 years in information security compliance, familiarity with SOC 2/ISO 27001, and strong writing and coordination skills. Remote-friendly with a strong focus on process improvement.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field, or equivalent experience.
• 2–4 years of industry experience in information security compliance, client assurance, IT audit, GRC.
• Experience completing or coordinating security questionnaires (e.g., SIG, CAIQ) and audits.
• Knowledge of IAM, vulnerability management, app/cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.

Responsibilities

• Serve as primary intake point for client due diligence (SIG, CAIQ, custom Qs, RFP/RFI).
• Triage requests, set deadlines, route to SMEs, track progress, escalate overdue items.
• Draft responses using approved content, route for SME validation and approval.
• Coordinate audits, client meetings, and onsite visits with security teams.
• Collect and organize evidence (policies, testing, attestations, docs).
• Review outgoing evidence for redaction and confidentiality; manage disclosures.

Skills

Security compliance

Client assurance

RFP/RFI response drafting

Evidence management

SME coordination

Documentation review

Microsoft Office

Communication skills

Project coordination

GRC familiarity

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies

Tools

Optro

UpGuard

ServiceNow

OneTrust

Whistic

SafeBase

Job description

SitusAMC is seeking a professional to coordinate client assurance and security questionnaires, gather evidence, and support audit activities. You will liaise with GRC, Security Operations, IAM, and other teams to obtain accurate responses and artifacts.

Ideal candidates have 2–4 years in information security compliance, familiarity with SOC 2/ISO 27001, and strong writing and coordination skills. Remote-friendly with a strong focus on process improvement.