Remote InfoSec GRC: Client Assurance Specialist

SitusAMC; Montpelier (VT); Remote; USD 70,000 - 85,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision insurance

401K

Job summary

SitusAMC is seeking a mid-level Information Security/Compliance professional to manage client due diligence, security questionnaires, and evidence requests. You will coordinate with GRC, security, IAM, and engineering teams to collect and validate controls evidence, respond to client inquiries, and maintain an organized repository for audit readiness.

The role emphasizes cross-functional collaboration, strong written communication, and the ability to translate technical controls into clear

Qualifications

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field, or equivalent combination of education and relevant experience.
• 2–4 years of industry experience in analyst-level roles such as information security compliance, client assurance, IT audit, or GRC.
• Experience completing or coordinating security questionnaires (e.g., SIG, CAIQ) and coordinating audits/evidence requests.

Responsibilities

• Serve as primary intake point for client due diligence questionnaires and security inquiries.
• Draft responses using approved content and route for SME validation.
• Coordinate with multiple teams (GRC, Security Operations, IAM, Infrastructure, App & Product) to gather evidence and attestations.
• Maintain an organized evidence repository and track findings and remediation status.
• Prepare status updates and governance reports for leadership.

Skills

Security questionnaires

GRC coordination

Project coordination

Analytical skills

Written communication

Microsoft Office

Education

Bachelor’s or Associate degree in Risk Management/IS/Cybersecurity or related field

Tools

OneTrust

Whistic

ServiceNow

Optro

Job description

SitusAMC is seeking a mid-level Information Security/Compliance professional to manage client due diligence, security questionnaires, and evidence requests. You will coordinate with GRC, security, IAM, and engineering teams to collect and validate controls evidence, respond to client inquiries, and maintain an organized repository for audit readiness.

The role emphasizes cross-functional collaboration, strong written communication, and the ability to translate technical controls into clear