Remote Client Risk & Compliance Advisor

Eliassen Group; Topeka (KS); On-site; USD 69,000 - 83,000; Full time

Benefits offered by this job

Medical, Dental, Vision benefits

401k with company match

Life insurance

Remote work

Job summary

Eliassen Group is seeking a Client Risk Analyst to serve as a liaison between clients, sales, product, and information security to assess risk, interpret client requests, and propose compliant, defensible controls. The role emphasizes clear business-focused communication and pragmatic risk mitigation.

The candidate should bring 4+ years in risk or security, familiarity with ISO 27001/NIST/SOC 2, and relevant certifications.

Qualifications

• 4+ years in risk management, information security, compliance, security consulting, or related disciplines.
• Strong understanding of information security principles, data protection controls, access management, encryption concepts, and privacy regulations.
• Experience reviewing client security questionnaires and control assessments.
• Ability to translate technical concepts into business language.
• Preferred experience with regulated industries such as financial services, insurance, mortgage, tax, or credit.
• Familiarity with ISO 27001, NIST, SOC 2, and privacy frameworks.
• Preferred certifications include CISSP, CISA, CRISC, or Security+.
• Strong judgment, executive communication, consultative mindset, and ability to handle complex risk scenarios.

Responsibilities

• Conduct assessments of client security, privacy, and operational control requirements.
• Evaluate client questionnaires, audits, and security reviews.
• Analyze client requests against existing enterprise security standards, policies, and compliance frameworks.
• Partner with legal, compliance, privacy, security, and product stakeholders to determine appropriate risk responses.
• Assess controls involving data privacy and protection, encryption standards and key management, IAM, authentication, password policies, and data retention.
• Evaluate the impact of security exceptions and alternative control recommendations.
• Understand how client and end-user data is utilized, shared, stored, and protected across processes.
• Serve as a trusted advisor during client negotiations involving security and compliance requirements.
• Explain security, compliance, and operational limitations in clear business terms.
• Recommend compensating controls and alternative approaches when requested requirements cannot be supported.
• Provide risk-based guidance balancing security, compliance, operational feasibility, and customer needs.
• Collaborate with Client Success, Client Delivery, Sales, Product Teams, Information Security, and Legal & Compliance.
• Support annual client reviews, regulatory assessments, and recurring risk management activities.
• Participate in client-facing meetings and presentations.
• Interpret internal security policies and external regulatory requirements.
• Support assessments for background screening, data privacy obligations, safeguarding standards, and industry-specific compliance.

Skills

Risk management

Information security

Compliance

Security consulting

Client governance

Business communication

Negotiation

Regulatory terminology

Education

CISSP

CISA

CRISC

Security+

Tools

ISO 27001

NIST

SOC 2

Privacy frameworks

Job description

Eliassen Group is seeking a Client Risk Analyst to serve as a liaison between clients, sales, product, and information security to assess risk, interpret client requests, and propose compliant, defensible controls. The role emphasizes clear business-focused communication and pragmatic risk mitigation.

The candidate should bring 4+ years in risk or security, familiarity with ISO 27001/NIST/SOC 2, and relevant certifications.