Client Assurance, InfoSec GRC

This is a fully remote position, open to applicants in United States.

📋 Description

• Coordinate inquiries related to customer security, including security questionnaires, due diligence requests, and client assurance activities.

• Oversee requests from the initial intake to final delivery.

• Assist with internal technology audits, control assessments, and the tracking of findings and remediation efforts.

• Manage incoming requests by establishing deadlines, prioritizing tasks, routing questions to subject matter experts (SMEs), tracking progress, and escalating overdue items.

• Compose responses utilizing approved policies, standards, and previously validated content; route these responses for validation and approval by SMEs.

• Maintain a comprehensive library of reusable standard responses.

• Act as a liaison between clients and the Information Security team by clarifying inquiries, managing follow-ups and timelines, scheduling meetings, and coordinating audit walkthroughs and onsite client visits.

• Collect, organize, validate, and compile supporting evidence for security and compliance.

• Review outgoing evidence for necessary redaction, confidentiality markings, minimum disclosure, and appropriate scope.

• Keep an organized repository of evidence that contains current, approved artifacts.

• Track findings identified by clients, audit findings, external security rating findings, penetration test results, and corrective action plans.

• Gather remediation updates and prepare status responses for clients.

• Coordinate evidence requests with control owners and monitor remediation until completion.

• Provide support for third-party vendor risk assessments as necessary.

• Maintain centralized trackers and a history of requests.

• Prepare operational metrics along with monthly and quarterly status reports for Information Security leadership.

• Maintain standard operating procedures while identifying opportunities for process efficiency improvements.

• Build effective working relationships and manage sensitive information with discretion.

• Undertake other tasks as assigned by the manager.

⛳️ Requirements

• Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or an equivalent combination of education and relevant experience.

• 2–4 years of industry and/or relevant experience, typically in an Analyst level role or an external equivalent.

• Experience in information security compliance, client assurance, IT audits, or governance, risk, and compliance (GRC).

• Proficiency in completing or coordinating security questionnaires, client audits, or evidence requests.

• Working knowledge of Identity and Access Management (IAM), vulnerability management, application and cloud security, incident response, and security awareness.

• Familiarity with SOC 2, ISO 27001, and NIST Cybersecurity Framework (CSF).

• Strong organizational, analytical, problem-solving, and project coordination abilities.

• Exceptional attention to detail with the capability to review documentation and data for accuracy and completeness.

• Excellent written and verbal communication skills.

• Proficiency in Microsoft Office, particularly Excel, Word, and PowerPoint.

• Experience in preparing reports, dashboards, status updates, and management documentation.

• Ability to work independently, exercise sound judgment, recognize when to seek guidance or escalate issues, and maintain confidentiality.

• Industry certifications such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer, or progress toward achieving one.

• Familiarity with FFIEC, GLBA, or NYDFS Part 500 regulations.

• Experience with GRC, questionnaire automation, or trust center platforms like Optro, UpGuard, ServiceNow, OneTrust, Whistic, or SafeBase.

• Exposure to AI governance inquiries or assessments of third-party vendor risks.

🏝️ Benefits

• Eligibility for discretionary bonuses for certain positions.

• Paid time off (PTO).

• Paid holidays.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Disability insurance.

• 401K plan.

• Equal Opportunity Employer.