Remote InfoSec GRC Analyst: Client Assurance & Audits

SitusAMC; Trenton (NJ); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Benefits: medical, dental, vision,life

401K plan

Job summary

SitusAMC is seeking a remote, full‑time Information Security & GRC coordinator to manage client security questionnaires, due diligence requests, and evidence delivery. You’ll work with Information Security, Product, Legal, and business teams to ensure timely, accurate responses that protect sensitive information.

Ideal candidates have 2–4 years of experience in security compliance, client assurance, IT audit, or GRC, with familiarity in frameworks like SOC 2, ISO 27001, and NIST CSF.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• 2–4 years of industry experience in info security compliance, client assurance, IT audit, or GRC.
• Experience coordinating security questionnaires (e.g., SIG, CAIQ) and client audits.
• Knowledge of IAM, vulnerability management, cloud security, and incident response.

Responsibilities

• Coordinate client security questionnaires and due diligence requests from intake to delivery.
• Draft responses using approved content and route for SME validation.
• Manage evidence collection, organization, and confidentiality.
• Track findings, remediation status, and status updates for clients.
• Support internal audits and third‑party risk assessments as needed.

Skills

Security questionnaires

GRC

Audit coordination

Vendor risk

Communication

Microsoft Office

Excel

Education

Bachelor’s or Associate degree in a related field

Tools

OneTrust

ServiceNow

Whistic

UpGuard

Optro

Job description

SitusAMC is seeking a remote, full‑time Information Security & GRC coordinator to manage client security questionnaires, due diligence requests, and evidence delivery. You’ll work with Information Security, Product, Legal, and business teams to ensure timely, accurate responses that protect sensitive information.

Ideal candidates have 2–4 years of experience in security compliance, client assurance, IT audit, or GRC, with familiarity in frameworks like SOC 2, ISO 27001, and NIST CSF.