Remote InfoSec GRC: Client Assurance Analyst

SitusAMC; Frankfort (KY); Remote; USD 70,000 - 85,000; Full time

Job summary

SitusAMC is seeking a mid-level professional to coordinate client security questionnaires and due diligence activities within the Information Security GRC team. You will gather evidence, draft responses, and work with SMEs across regions to ensure timely, accurate client attestations.

The role emphasizes collaboration with Information Security, Legal, Product, and IT teams, handling sensitive information with confidentiality. Remote work is supported for this position.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field.
• 2–4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Experience coordinating security questionnaires (e.g., SIG, CAIQ) and evidence requests.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.
• Strong written and verbal communication; ability to write clear client responses.

Responsibilities

• Coordinate client security questionnaires and due diligence responses from intake to delivery.
• Draft responses using approved policies and SMEs for validation.
• Liaise between clients and Information Security; manage follow-ups and timelines.
• Collect and organize evidence (policies, attestations, architectures).
• Coordinate with GRC, SIEM, IAM, Infrastructure, and Product teams to obtain accurate responses.
• Maintain evidence repository and assist with audit support and remediation tracking.

Skills

Communication skills

Project coordination

Attention to detail

MS Office proficiency

Security awareness

Written communication

Education

Bachelor's or Associate degree in a related field

Tools

ServiceNow

OneTrust

Whistic

RiskRecon

Excel

PowerPoint

Job description

SitusAMC is seeking a mid-level professional to coordinate client security questionnaires and due diligence activities within the Information Security GRC team. You will gather evidence, draft responses, and work with SMEs across regions to ensure timely, accurate client attestations.

The role emphasizes collaboration with Information Security, Legal, Product, and IT teams, handling sensitive information with confidentiality. Remote work is supported for this position.