Remote InfoSec GRC — Client Assurance Lead

SitusAMC; Jackson (MS); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision, life, and 401

Job summary

SitusAMC is seeking a detail-oriented professional to coordinate client security inquiries, questionnaires, and due diligence requests as part of the Information Security GRC team. You will collect evidence, draft responses, and collaborate with cross-functional teams to meet regulatory and client obligations.

Responsibilities include maintaining evidence repositories, tracking findings, and supporting internal and third-party audits.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent combination of education and relevant experience.
• Mid-level professional with 2-4 years of industry and/or relevant experience, typically at an Analyst level role or external equivalent, such as information security compliance, client assurance, IT audit, or governance, risk, and compliance (GRC).
• Experience completing or coordinating security questionnaires (e.g., SIG, CAIQ), client audits, or evidence requests, including maintaining trackers and following items through completion.
• Working knowledge of core information security domains, including IAM, vulnerability management, application and cloud security, incident response, and security awareness.

Responsibilities

• Coordinate client security inquiries, security questionnaires, due diligence requests, and other client assurance activities across regions.
• Draft responses using approved policies and content, route for SME validation, and maintain reusable content library.
• Act as liaison between clients and Information Security, manage follow-ups and response timelines, and coordinate audit walkthroughs.
• Collect and organize evidence such as policies, standards, procedures, penetration test summaries, and architecture documentation.
• Track audit findings and remediation status, support internal audits, and assist third-party risk assessments as needed.
• Prepare status reports and maintain trackers for open requests, aging items, and remediation timelines.

Skills

Analytical skills

Project coordination

Written and verbal communication

Microsoft Office (Excel, Word, PowerPt

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field

Equivalent combination of education and relevant experience

Tools

Optro

UpGuard

ServiceNow

OneTrust

Whistic

SafeBase

Job description

SitusAMC is seeking a detail-oriented professional to coordinate client security inquiries, questionnaires, and due diligence requests as part of the Information Security GRC team. You will collect evidence, draft responses, and collaborate with cross-functional teams to meet regulatory and client obligations.

Responsibilities include maintaining evidence repositories, tracking findings, and supporting internal and third-party audits.