Client Assurance, InfoSec GRC

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $70k - $85k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SitusAMC

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

💼 Consulting

📦 Logistics

🏠 Real Estate

💰 Private equity on 2020-05

Consulting • Logistics • Real Estate

SitusAMC is the leading independent provider of services, data, analytics, and technology that power the full lifecycle of commercial and residential real estate finance. The company delivers underwriting and investment advisory, securitization and capital markets support, primary and special servicing, portfolio and asset management, valuations, loan fulfillment, compliance and diligence, and staffing/outsourcing solutions. SitusAMC serves lenders, investors and servicers with market research, analytic tools and technology platforms across the US and Europe to support origination, transaction execution, servicing, and valuation of real estate assets.

📋 Description

• Coordinate customer security inquiries, security questionnaires, due diligence requests, and client assurance activities • Manage requests from intake through delivery • Support internal technology audits, control assessments, and tracking of findings and remediation • Triage incoming requests, establish deadlines, set priorities, route questions to SMEs, track progress, and escalate overdue items • Draft responses using approved policies, standards, and previously approved content; route responses for SME validation and approval • Maintain a library of reusable standard responses • Liaise between clients and Information Security by clarifying questions, managing follow-ups and timelines, scheduling meetings, and coordinating audit walkthroughs and onsite client visits • Collect, organize, validate, and package supporting security and compliance evidence • Review outgoing evidence for redaction, confidentiality markings, minimum necessary disclosure, and appropriate scope • Maintain an organized evidence repository with current, approved artifacts • Track client-identified findings, audit findings, external security rating findings, penetration test findings, and corrective action plans • Gather remediation updates and prepare client status responses • Coordinate evidence requests with control owners and track remediation through completion • Support third-party vendor risk assessments as needed • Maintain centralized trackers and request history • Prepare operational metrics and monthly and quarterly status reports for Information Security leadership • Maintain standard operating procedures and identify process-efficiency improvements • Build effective working relationships and handle sensitive information appropriately • Perform other activities assigned by the manager

🎯 Requirements

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent combination of education and relevant experience • 2–4 years of industry and/or relevant experience, typically at an Analyst level role or external equivalent • Experience in information security compliance, client assurance, IT audit, or governance, risk, and compliance (GRC) • Experience completing or coordinating security questionnaires, client audits, or evidence requests • Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness • Familiarity with SOC 2, ISO 27001, and NIST CSF • Strong organizational, analytical, problem-solving, and project coordination skills • Strong attention to detail and ability to review documentation and data for completeness and accuracy • Strong written and verbal communication skills • Proficiency with Microsoft Office, specifically Excel, Word, and PowerPoint • Experience preparing reports, dashboards, status updates, and management documentation • Ability to work independently, exercise sound judgment, recognize when guidance or escalation is needed, and maintain confidentiality • Industry certification such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer, or progress toward one • Familiarity with FFIEC, GLBA, or NYDFS Part 500 • Experience with GRC, questionnaire automation, or trust center platforms such as Optro, UpGuard, ServiceNow, OneTrust, Whistic, or SafeBase • Exposure to AI governance inquiries or third-party vendor risk assessments

🏖️ Benefits

• Discretionary bonus eligibility for certain positions • PTO • Paid holidays • Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • 401K • Equal Opportunity Employer