InfoSec GRC Client Assurance Specialist - Remote

SitusAMC; Madison (WI); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision, life, and 401

Job summary

SitusAMC is seeking a mid‑level professional to coordinate client security questionnaires and due diligence activities within the Information Security GRC team. You will collect, validate, and deliver cybersecurity responses while safeguarding sensitive information.

Collaborative work with Legal, Product, and Tech teams across regions is essential. You will manage intake, evidence, audits, and remediation tracking, building a reusable library of responses and supporting client relationships.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• 2–4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Hands-on experience coordinating security questionnaires (e.g., SIG, CAIQ) and evidence requests.
• Knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.
• Strong written and verbal communication skills for client audiences.

Responsibilities

• Serve as primary intake point for client security due diligence questionnaires and RFP responses.
• Draft responses using approved content and route to SMEs for validation and approval.
• Coordinate evidence collection and maintain an organized evidence repository.
• Track findings, remediation owners, and status updates for clients.
• Coordinate with cross-functional teams to obtain accurate responses and attestations.
• Prepare reports and dashboards for leadership on status and metrics.
• Maintain SOPs and seek efficiency improvements in client assurance processes.

Skills

Analytical skills

Organizational skills

Project coordination

Written communication

Attention to detail

Education

Bachelor’s or Associate degree in risk management or related

Tools

Excel

Word

PowerPoint

Job description

SitusAMC is seeking a mid‑level professional to coordinate client security questionnaires and due diligence activities within the Information Security GRC team. You will collect, validate, and deliver cybersecurity responses while safeguarding sensitive information.

Collaborative work with Legal, Product, and Tech teams across regions is essential. You will manage intake, evidence, audits, and remediation tracking, building a reusable library of responses and supporting client relationships.