Remote InfoSec GRC & Client Assurance Specialist

SitusAMC; Santa Fe (NM); À distance; USD 70 000 - 85 000; Plein temps

Avantages offerts par ce poste

PTO and paid holidays

Medical, dental, vision, life, and 401

Résumé du poste

SitusAMC is seeking a mid-level professional to coordinate client security inquiries, due diligence responses, and evidence management within the GRC team. You will collect, validate, and deliver accurate cybersecurity responses while safeguarding sensitive information.

The role partners with Legal, Product, and Technology across regions. Responsibilities include drafting responses, organizing evidence, tracking findings, and supporting audits and regulatory requirements.

Qualifications

• Experience coordinating security questionnaires (e.g., SIG, CAIQ) and client audits.
• Experience maintaining trackers and following items through completion.
• Familiarity with SOC 2, ISO 27001, and NIST CSF.
• Strong written and verbal communication for client audiences.
• Ability to handle confidential information and coordinate cross-functionally.

Responsabilités

• Client Assurance and Security Questionnaires
• Serve as primary intake point for client due diligence questionnaires
• Triage incoming requests, set deadlines, route to SMEs, track progress
• Draft responses using approved policies and content, validate with SMEs
• Act as liaison between clients and Information Security, coordinate audits
• Evidence and Data Management: collect policies, procedures, attestations, docs
• Coordinate with GRC, Security Ops, IAM, Infra, App, Product teams for accurate responses
• Review outgoing evidence for redaction and scope; maintain evidence repository
• Findings and Audit Support: track audit findings and remediation status
• Prepare operational metrics and status reports for leadership
• Maintain SOPs and identify efficiency improvements
• Build relationships and maintain confidentiality across regions
• Other activities as assigned
• Preferred: Industry certifications (e.g., CISA, ISO 27001 Lead Auditor)
• Experience with third-party risk assessments and trust center platforms

Connaissances

Security questionnaires

GRC

IAM

Audits

Policy & evidence management

Formation

Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or related field

Outils

Microsoft Office (Excel, Word, PowerPoint)

Description du poste

SitusAMC is seeking a mid-level professional to coordinate client security inquiries, due diligence responses, and evidence management within the GRC team. You will collect, validate, and deliver accurate cybersecurity responses while safeguarding sensitive information.

The role partners with Legal, Product, and Technology across regions. Responsibilities include drafting responses, organizing evidence, tracking findings, and supporting audits and regulatory requirements.