InfoSec GRC Client Assurance Specialist

SitusAMC; Olympia (WA); Remote; USD 70.000 - 85.000; Vollzeit

Benefits dieser Stelle

PTO and paid holidays

401K plan

Medical/dental/vision insurance

Zusammenfassung

SitusAMC is seeking a mid-level Information Security/Compliance professional to serve as the primary coordinator for client security inquiries, questionnaires, and due diligence. You will manage intake, coordinate SMEs, and draft responses to maintain timely, accurate client engagements while protecting sensitive information.

You will collect, organize, and validate evidence, coordinate with cross-functional teams, and support audits and third‑party risk assessments.

Qualifikationen

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• Mid-level professional with 2-4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Hands-on experience completing or coordinating security questionnaires and evidence requests, with trackers and follow-through.
• Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF frameworks.
• Strong written and verbal communication skills for client audiences.
• Proficiency with Microsoft Office, especially Excel, Word, and PowerPoint.
• Ability to work independently within policies and maintain confidentiality.

Aufgaben

• Client Assurance and Security Questionnaires
• Intake and coordinate client security due diligence requests
• Draft responses using approved content and route for SME validation
• Liaise between clients and Information Security; coordinate audits and walkthroughs
• Evidence and Data Management: collect policies, attestations, docs
• Coordinate with GRC, Security Ops, IAM, Infra, App, and Product teams
• Review outgoing evidence for redaction and confidentiality, escalate questions
• Maintain an organized evidence repository for timely responses
• Track client findings and remediation status
• Support internal audits and control assessments
• Assist with third‑party risk assessments as needed
• Prepare operational metrics and status reports for leadership
• Maintain SOPs and improve reusable content
• Build stakeholder relationships and handle sensitive information
• Other duties as assigned by manager

Kenntnisse

Organizational skills

Analytical skills

Problem-solving

Project coordination

Written and verbal communication

Microsoft Office (Excel/Word/PowerPt)

Ausbildung

Degree in risk/IS/cybersecurity

Tools

Optro

UpGuard

ServiceNow

OneTrust

Whistic

SafeBase

Jobbeschreibung

SitusAMC is seeking a mid-level Information Security/Compliance professional to serve as the primary coordinator for client security inquiries, questionnaires, and due diligence. You will manage intake, coordinate SMEs, and draft responses to maintain timely, accurate client engagements while protecting sensitive information.

You will collect, organize, and validate evidence, coordinate with cross-functional teams, and support audits and third‑party risk assessments.