Remote InfoSec GRC: Client Assurance Specialist

SitusAMC; Boise (ID); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision insurance

401K

Job summary

SitusAMC is seeking a mid-level Information Security/Client Assurance professional to coordinate client due diligence, security questionnaires, and evidence requests. You will work with IAM, vulnerability management, and cloud security SMEs to provide accurate responses and maintain an evidence repository.

The role requires 2–4 years in information security compliance or related fields, strong written and verbal communication, and experience with SOC 2/ISO 27001/NIST CSF.

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or equivalent.
• 2–4 years of industry experience at Analyst level or equivalent in information security compliance, client assurance, IT audit, or GRC.
• Experience completing or coordinating security questionnaires (e.g., SIG, CAIQ) and coordinating evidence requests.
• Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF frameworks.
• Strong organization, analytical, problem-solving, and project coordination skills.
• Strong written and verbal communication for client audiences.
• Proficiency with Microsoft Office (Excel, Word, PowerPoint).
• Experience preparing reports, dashboards, and management documentation.
• Ability to work independently within policies and maintain confidentiality.
• Preferred certifications: CompTIA Security+, CISA, ISO/IEC 27001 Lead Auditor/Lead Implementer.

Responsibilities

• Serve as primary intake point for client security due diligence (questionnaires, RFP/RFI sections).
• Draft responses using approved content and route to SMEs for validation.
• Coordinate with multiple teams to obtain accurate responses and evidence.
• Review outgoing evidence for redaction and confidentiality markings.
• Maintain organized evidence repository and status trackers.
• Track findings and remediation progress including CAPs and audits.
• Coordinate evidence requests with control owners for internal audits and assessments.
• Assist with third-party (vendor) risk assessments as needed.
• Prepare operational metrics and status reports for Information Security leadership.

Skills

Security questionnaires

Client assurance

GRC awareness

Communication

Project coordination

Education

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies

Tools

OneTrust

Whistic

ServiceNow

UpGuard

Optro

Job description

SitusAMC is seeking a mid-level Information Security/Client Assurance professional to coordinate client due diligence, security questionnaires, and evidence requests. You will work with IAM, vulnerability management, and cloud security SMEs to provide accurate responses and maintain an evidence repository.

The role requires 2–4 years in information security compliance or related fields, strong written and verbal communication, and experience with SOC 2/ISO 27001/NIST CSF.