Remote InfoSec GRC & Client Assurance Analyst

SitusAMC; Bismarck (ND); Remote; USD 70,000 - 85,000; Full time

Job summary

SitusAMC is seeking a remote, full-time Analyst to coordinate client security questionnaires and due diligence within the Information Security GRC team. You will collect and validate evidence, draft responses, and coordinate with SMEs across regions to ensure timely delivery and compliance with regulatory requirements.

You will support audits, track findings and remediation, and help maintain a library of reusable responses while working with product, legal, and business teams.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• 2-4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Experience completing or coordinating security questionnaires (e.g., SIG, CAIQ) and evidence requests.

Responsibilities

• Coordinate client security questionnaires and due diligence activities; serve as intake point for questionnaires and inquiries.
• Draft responses using approved content; route to SMEs for validation and approval before delivery.
• Manage intake deadlines, prioritization, routing to SMEs, and escalation of overdue items.
• Collect and organize evidence (policies, standards, procedures, attestations, docs).
• Coordinate with cross-functional teams to obtain accurate responses and attestations.
• Track findings and remediation; support internal audits and third‑party risk assessments.

Skills

Security questionnaires

Client assurance

GRC

Project coordination

Documentation

Communication

Education

Bachelor’s or Associate degree in Risk Management or related field

Tools

Microsoft Office

ServiceNow

OneTrust

Whistic

Job description

SitusAMC is seeking a remote, full-time Analyst to coordinate client security questionnaires and due diligence within the Information Security GRC team. You will collect and validate evidence, draft responses, and coordinate with SMEs across regions to ensure timely delivery and compliance with regulatory requirements.

You will support audits, track findings and remediation, and help maintain a library of reusable responses while working with product, legal, and business teams.