Remote InfoSec GRC Client Assurance Analyst

SitusAMC Holdings Corp.; United States; Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision insurance

Life insurance

Disability insurance

401K

Job summary

SitusAMC Holdings Corp. is seeking a Client Assurance - InfoSec GRC professional to coordinate client security inquiries, questionnaires (SIG, CAIQ), audit support, and remediation tracking from intake to delivery.

You will partner with Information Security, Product, Legal, and regional teams to produce accurate cybersecurity responses while protecting sensitive information. The role requires 2–4 years in risk, information security, or GRC, with knowledge of IAM, vulnerability management, ISO

Qualifications

• 2–4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Experience coordinating security questionnaires (SIG, CAIQ) and evidence requests.
• Familiar with SOC 2, ISO 27001, and NIST CSF frameworks.
• Strong written and verbal communication for client audiences.

Responsibilities

• Serve as primary intake for client security questionnaires and audits.
• Collect, organize, and validate evidence (policies, attestations, configuration screenshots).
• Coordinate with IAM, Security Ops, Architecture, and Product teams to obtain accurate responses.
• Maintain evidence repository and ensure proper redaction and confidentiality.
• Track findings and remediation status; prepare client status updates.

Skills

Security questionnaires

GRC

IAM

Vulnerability management

Cloud security

Incident response

Security awareness

Documentation review

Project coordination

Excel

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies

Tools

ServiceNow

OneTrust

Whistic

SafeBase

Optro

UpGuard

Job description

SitusAMC Holdings Corp. is seeking a Client Assurance - InfoSec GRC professional to coordinate client security inquiries, questionnaires (SIG, CAIQ), audit support, and remediation tracking from intake to delivery.

You will partner with Information Security, Product, Legal, and regional teams to produce accurate cybersecurity responses while protecting sensitive information. The role requires 2–4 years in risk, information security, or GRC, with knowledge of IAM, vulnerability management, ISO