Remote InfoSec GRC: Client Assurance Lead

SitusAMC; City of Albany (NY); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

Discretionary bonus

PTO

Paid holidays

401K

Medical insurance

Job summary

SitusAMC is seeking a mid‑level Information Security/Client Assurance professional to manage client due diligence, evidence collection, and responses to security questionnaires such as SIG and CAIQ. You will coordinate with GRC, Security Operations, IAM, and other teams to ensure timely, accurate responses.

Ideal candidates have 2–4 years in security/compliance, familiarity with SOC 2/ISO 27001, and strong written communication to translate technical details for clients across regions.

Qualifications

• Bachelor’s or Associate degree in a related field or equivalent experience.
• 2–4 years in information security, risk, or GRC roles.
• Experience coordinating security questionnaires and evidence requests.
• Working knowledge of IAM, vulnerability management, and cloud security.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.

Responsibilities

• Serve as primary intake for client security due diligence, including SIG/CAIQ questionnaires.
• Coordinate evidence collection: policies, attestations, docs, and screenshots.
• Triag e requests, route to SMEs, track progress and deadlines.
• Draft responses per approved content and route for validation.
• Act as liaison between clients and Information Security and manage audit walkthroughs.
• Maintain evidence repository and ensure proper redaction and scoping.
• Support third-party risk assessments as needed.
• Prepare status reports and metrics for leadership.

Skills

Security questionnaires

GRC coordination

Documentation

Stakeholder communication

Microsoft Excel

Audit support

Vendor risk

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies

Tools

ServiceNow

OneTrust

Whistic

Optro

UpGuard

Job description

SitusAMC is seeking a mid‑level Information Security/Client Assurance professional to manage client due diligence, evidence collection, and responses to security questionnaires such as SIG and CAIQ. You will coordinate with GRC, Security Operations, IAM, and other teams to ensure timely, accurate responses.

Ideal candidates have 2–4 years in security/compliance, familiarity with SOC 2/ISO 27001, and strong written communication to translate technical details for clients across regions.