Client Assurance- InfoSec GRC - Remote US

Role overview Coordinate customer security reviews and assurance requests from intake through delivery, helping clients understand an organization’s security and compliance practices. The role also supports internal audits, control assessments, and remediation tracking, working across security, technology, legal, product, and business teams while protecting sensitive information.

Responsibilities - Triage security questionnaires, audit requests, and cybersecurity questions in proposals; assign owners, set deadlines, track progress, and escalate delays. - Draft responses using approved materials, coordinate subject matter expert reviews, and maintain reusable answers. - Gather and organize evidence such as policies, test summaries, training records, and technical documentation; check materials for accuracy, scope, confidentiality, and appropriate redaction before sharing. - Coordinate client follow-ups, meetings, audit walkthroughs, and visits, and track findings and corrective actions through completion. - Support internal technology audits and control assessments, maintain request and evidence records, and prepare operational metrics and status reports. - Improve assurance procedures and evidence resources to make responses more consistent and efficient.

Requirements - Associate or bachelor’s degree in a related field, or an equivalent combination of education and relevant experience. - Around 2–4 years in information security compliance, client assurance, IT audit, or governance, risk, and compliance; financial or professional services experience is preferred. - Experience coordinating security questionnaires, client audits, or evidence requests and tracking work through completion. - Working knowledge of security areas such as identity and access management, vulnerability management, application and cloud security, incident response, and security awareness. - Familiarity with assurance frameworks such as SOC 2, ISO 27001, and NIST CSF. - Strong organization, analysis, attention to detail, communication, and deadline management; able to handle confidential material and use Excel, Word, and PowerPoint.

Nice to have - Security or audit certification, such as Security+, CISA, or ISO 27001; familiarity with financial services security regulations, GRC or questionnaire platforms, AI governance inquiries, or vendor risk reviews.