Remote InfoSec GRC: Client Assurance Lead

SitusAMC; Helena (MT); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision, life, and 401

Job summary

SitusAMC is seeking a mid-level Information Security/Client Assurance professional to lead and coordinate responses for client due diligence, questionnaires, and audit evidence. You will work with GRC, IAM, Security Ops, and product teams to gather, validate, and deliver accurate attestations in a timely manner.

Ideal candidates bring 2–4 years in information security compliance or client assurance, experience with SIG/CAIQ, and familiarity with SOC 2, ISO 27001, and NIST CSF, plus strong

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field, or equivalent combination of education and relevant experience.
• 2-4 years of industry and/or relevant experience at Analyst level in information security compliance, client assurance, IT audit, or GRC.
• Hands-on experience coordinating security questionnaires (e.g., SIG, CAIQ) and client audits.
• Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.
• Strong organizational, analytical, problem-solving, and project coordination skills.
• Strong written and verbal communication for technical audiences and cross-functional teams.
• Proficiency with Microsoft Office (Excel, Word, PowerPoint).
• Experience preparing reports, dashboards, status updates, and management documentation.
• Ability to work independently within policies and maintain confidentiality.
• Preferred certifications such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor/Implementer.
• Familiarity with financial services regulatory expectations for information security and third-party risk.
• Experience with GRC, questionnaire automation, or trust center platforms (Optro, UpGuard, ServiceNow, OneTrust, Whistic, SafeBase).
• Exposure to AI governance inquiries or third-party risk assessments.

Responsibilities

• Serve as primary intake for client security due diligence and questionnaires (SIG, CAIQ, RFP/RFI sections).
• Triage requests, set deadlines, route to SMEs, track progress, and escalate overdue items.
• Draft responses using approved content; maintain a library of reusable responses.
• Act as liaison between clients and Information Security to clarify questions and coordinate timelines.
• Collect and organize evidence (policies, standards, testing results, documentation).
• Coordinate with GRC, Security Ops, IAM, Infrastructure, and product teams for accurate responses and attestations.
• Review outgoing evidence for redaction and confidentiality before release.
• Maintain an organized evidence repository of approved artifacts for timely responses.
• Track findings from audits, external ratings, and CAPs; prepare status updates for clients.
• Support audits and control assessments by coordinating evidence requests and documenting results.
• Provide occasional support for third-party risk assessments as needed.
• Maintain trackers and SOPs; improve efficiency by expanding reusable content.

Skills

Attention to detail

Strong communication

Project coordination

Time management

Analytical thinking

Education

Bachelor’s or Associate degree in Risk Management

Tools

Excel

Word

PowerPoint

Job description

SitusAMC is seeking a mid-level Information Security/Client Assurance professional to lead and coordinate responses for client due diligence, questionnaires, and audit evidence. You will work with GRC, IAM, Security Ops, and product teams to gather, validate, and deliver accurate attestations in a timely manner.

Ideal candidates bring 2–4 years in information security compliance or client assurance, experience with SIG/CAIQ, and familiarity with SOC 2, ISO 27001, and NIST CSF, plus strong