Remote InfoSec GRC: Client Assurance Lead

SitusAMC; Dover (DE); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO

Medical insurance

401K

Job summary

SitusAMC is seeking a detail-oriented Information Security Support professional in the United States to manage client assurance activities, coordinate evidence, and respond to security questionnaires and audit inquiries. The role interfaces with GRC, Security Operations, IAM, and other teams to produce accurate, timely responses.

The ideal candidate has 2–4 years in risk/compliance, strong written communication, and experience with SOC 2, ISO 27001, or NIST CSF.

Qualifications

• Bachelor’s or Associate degree in a related field or equivalent.
• 2-4 years of industry experience in risk, compliance, or audits, Analyst level or external equivalent.
• Experience completing security questionnaires and coordinating audits.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.
• Strong organizational and communication skills.
• Proficiency with MS Office (Excel, Word, PowerPoint).
• Ability to work independently while maintaining confidentiality.
• Certifications such as CISA or ISO/IEC 27001 Lead Auditor preferred.

Responsibilities

• Serve as main intake point for client security due diligence and questionnaires.
• Coordinate evidence requests with multiple teams and SMEs.
• Draft responses using approved content and validate with SMEs.
• Manage evidence library and ensure proper redaction and scoping.
• Track findings and remediation status for audits and CAPs.
• Support third-party risk assessments as needed.
• Prepare operational metrics and status reports for leadership.

Skills

Security questionnaires

Client due diligence

Intake coordination

SME routing & escalation

Documentation management

Education

Bachelor's/Associate degree in risk, information systems, cybersecurity, finance, or related field

Tools

Microsoft Office

Excel

Word

PowerPoint

Job description

SitusAMC is seeking a detail-oriented Information Security Support professional in the United States to manage client assurance activities, coordinate evidence, and respond to security questionnaires and audit inquiries. The role interfaces with GRC, Security Operations, IAM, and other teams to produce accurate, timely responses.

The ideal candidate has 2–4 years in risk/compliance, strong written communication, and experience with SOC 2, ISO 27001, or NIST CSF.