Remote InfoSec GRC: Client Assurance & Q&A Lead

SitusAMC; Pierre (SD); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO & holidays

Health benefits

401K plan

Job summary

SitusAMC is seeking a mid-level Information Security GRC professional to coordinate client assurance inquiries and security questionnaires through delivery. You will gather, organize, and validate evidence, working with cross-functional teams to ensure accurate, timely responses while protecting sensitive information.

Responsibilities include drafting responses, maintaining reusable content, and supporting internal audits and third-party assessments.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies or related field.
• 2-4 years of industry experience in information security compliance, client assurance, IT audit, or GRC.
• Experience coordinating security questionnaires (e.g., SIG, CAIQ) and evidence requests.
• Familiarity with IAM, vulnerability management, cloud security, incident response, and security awareness.
• Knowledge of SOC 2, ISO 27001, and NIST CSF frameworks.
• Strong written and verbal communication and ability to produce client-ready responses.

Responsibilities

• Coordinate client security questionnaires and due diligence requests from intake to delivery.
• Draft responses using approved policies and SME validation and maintain reusable content.
• Establish deadlines, prioritize, route to SMEs, track progress and escalate overdue items.
• Liaise between clients and Information Security; schedule meetings and coordinate audits.
• Gather and organize evidence (policies, attestations, architecture docs) and maintain evidence repository.
• Collaborate with IAM, Security Operations, Security Architecture, Infrastructure, App and Product teams for accurate responses.
• Review outgoing evidence for redaction, confidentiality, and scope; escalate sharing concerns.
• Prepare status updates, dashboards, and reports for leadership.

Skills

GRC

Security questionnaires

Project coordination

Communication skills

MS Office (Excel/PowerPoint)

Documentation & reporting

IAM / Cloud security knowledge

Vulnerability management

SOC 2 / ISO 27001 familiarity

Vendor risk / third-party risk

Education

Bachelor's or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies

Industry certifications (e.g., CompTIA Security+, CISA, ISO/IEC 27001 Lead Auditor)

Tools

OneTrust

ServiceNow

Whistic

UpGuard

Optro

Job description

SitusAMC is seeking a mid-level Information Security GRC professional to coordinate client assurance inquiries and security questionnaires through delivery. You will gather, organize, and validate evidence, working with cross-functional teams to ensure accurate, timely responses while protecting sensitive information.

Responsibilities include drafting responses, maintaining reusable content, and supporting internal audits and third-party assessments.