{"id":2644957,"url":"https://alion.io/job/situsamc-client-assurance-infosec-grc-remote-us","title":"Client Assurance- InfoSec GRC - Remote US","company":{"id":2786781,"name":"SitusAMC","domain":"situsamc.com","url":"https://alion.io/company/situsamc","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":70000,"max":85000,"currency":"USD","period":"year","gross":null,"usd_annual":85000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Office","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-15T19:50:30Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-11-05T23:09:19Z","board_verified":true,"closed_at":null,"days_open":21,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":21},"description":"SitusAMC is where the best and most passionate people come to transform our client’s businesses and their own careers. Whether you’re a real estate veteran, a passionate technologist, or looking to get your start, join us as we work together to realize opportunities for everyone, we proudly serve.\nAt SitusAMC, we are looking to match your unique experience with one of our amazing careers, so that we can help you realize your potential and career growth within the Real Estate Industry. If you are someone who can be yourself, advocate for others, stay nimble, dream big, own every outcome, and think global but act local - come join our team!\nThis role serves as a primary coordinator for customer security inquiries, security questionnaires, due diligence requests, and other client assurance activities within SitusAMC’s Information Security GRC team. The role manages these requests from intake through delivery and supports internal technology audits, control assessments, and the tracking of related findings and remediation. Partnering with Information Security, Product, Technology, Legal, and business teams across regions, this role collects, validates, packages, and delivers accurate cybersecurity and compliance responses while protecting sensitive company information. This role supports client relationships, contractual obligations, internal policies, and applicable regulatory requirements.Essential Job Functions:\nClient Assurance and Security QuestionnairesServe as a primary intake point for client security due diligence, including standardized questionnaires (e.g., SIG, CAIQ), custom due diligence questionnaires, cybersecurity sections of RFPs and RFIs, and topic-specific inquiries such as AI, cloud security, vulnerability management etc.\nTriage incoming requests by establishing internal deadlines, setting priorities, routing questions to the appropriate subject matter experts (SMEs), tracking progress, and escalating overdue items.\nDraft responses using approved policies, standards, and previously approved content, and route them to SMEs for validation and approval before delivery; help maintain a library of reusable standard responses.\nAct as a liaison between clients and Information Security by clarifying questions, managing follow-ups and response timelines, scheduling meetings, and coordinating audit walkthroughs and onsite client visits.\n\nEvidence and Data ManagementCollect and organize supporting evidence such as policies, standards, procedures, penetration test summaries, security awareness training attestations, architecture and API documentation, and configuration screenshots.\nCoordinate with GRC, Security Operations, Security Architecture, Identity and Access Management (IAM), Infrastructure, Application, and Product teams to obtain accurate responses, evidence, and technical attestations.\nReview outgoing evidence before release to confirm appropriate redaction, confidentiality markings, minimum necessary disclosure, and scoping to the client’s request, and escalate questions about sharing sensitive information.\nMaintain an organized evidence repository with current, approved artifacts to support consistent and timely responses.\n\nFindings and Audit SupportTrack client-identified findings, including audit findings, external security rating findings (e.g., RiskRecon), penetration test findings, and corrective action plans (CAPs); gather updates from remediation owners; and prepare status responses for clients.\nSupport internal technology audits and control assessments by coordinating evidence requests with control owners, documenting results, and tracking remediation through completion.\nProvide occasional support for third-party (vendor) risk assessments as needed.\n\nReporting and Process ImprovementMaintain centralized trackers and request history that provide accurate visibility into open requests, due dates, findings, and remediation status.\nPrepare operational metrics (e.g., request volume, open and aging items, closure timelines) and monthly and quarterly status reports for Information Security leadership.\nMaintain standard operating procedures for the client assurance process and identify opportunities to improve efficiency, such as expanding reusable response content and reducing duplicate SME requests.\nBuild effective working relationships, provide responsive and professional support, maintain confidentiality, and appropriately handle sensitive company, client, employee, security, and risk-related information.\n\nOther activities as may be assigned by your manager\nQualifications/ Requirements:Bachelor’s or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent combination of education and relevant experience.\nMid-level professional with 2-4 years of industry and/or relevant experience, typically at an Analyst level role or external equivalent, such as information security compliance, client assurance, IT audit, or governance, risk, and compliance (GRC). Experience preferably in the financial services or professional services industry.\nHands-on experience completing or coordinating security questionnaires (e.g., SIG, CAIQ), client audits, or evidence requests, including maintaining trackers and following items through completion.\nWorking knowledge of core information security domains, including IAM, vulnerability management, application and cloud security, incident response, and security awareness, sufficient to interpret client questions and engage the right SMEs.\nFamiliarity with common security and assurance frameworks, such as SOC 2, ISO 27001, and NIST CSF.\nStrong organizational, analytical, problem-solving, and project coordination skills, with the ability to manage competing priorities and deadlines.\nStrong attention to detail and the ability to review documentation and data for completeness and accuracy, identify issues, and escalate concerns appropriately.\nStrong written and verbal communication skills, including the ability to write clear, accurate responses for client audiences, translate technical information for non-technical stakeholders, and work professionally across functions, organizational levels, and geographic regions.\nProficiency with Microsoft Office, specifically Excel, Word, and PowerPoint.\nExperience preparing reports, dashboards, status updates, and management documentation.\nAbility to work independently within established policies, procedures, and controls; exercise sound judgment; recognize when guidance or escalation is needed; and maintain confidentiality when handling sensitive information.\nPreferred Qualifications\nIndustry certification such as CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer, or progress toward one.\nFamiliarity with financial services regulatory expectations for information security and third-party risk (e.g., FFIEC, GLBA, NYDFS Part 500).\nExperience with GRC, questionnaire automation, or trust center platforms (e.g., Optro, UpGuard, ServiceNow, OneTrust, Whistic, SafeBase).\nExposure to AI governance inquiries or third-party (vendor) risk assessments.\n\n#LI-AS1 #LI-Remote\nNote: This job description is not intended to be all inclusive or exclusive. At any time, employees may perform other related duties as required to meet the ongoing needs of the organization and participate in additional trainings. SitusAMC does not accept unsolicited resumes from staffing agencies, search firms or any third parties. Any unsolicited resume submitted to SitusAMC in any manner will be considered SitusAMC property, and SitusAMC will not pay a fee for any placement resulting from the receipt of an unsolicited resume.\nThe annual full time base salary range for this role is\n$70,000.00 - $85,000.00Specific compensation is determined through interviews and a review of relevant education, experience, training, skills, geographic location and alignment with market data. Additionally, certain positions may be eligible to receive a discretionary bonus as determined by bonus program guidelines, position eligibility and SitusAMC Senior Management approval. SitusAMC offers PTO and paid holidays, the terms of which are set forth in the program policies. All full time employees also are eligible to participate in various benefit plans, including medical, dental, vision, life, disability insurance and 401K; in each case in accordance with the terms of the applicable plans.\nPay Transparency Nondiscrimination Provision\nSitusAMC is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.\nKnow Your Rights, Workplace Discrimination is Illegal","description_format":"text","description_chars":8905,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Commercial Real Estate","Financial Software & Embedded Finance","Real Estate Appraisal"],"lifecycle":[{"event":"open","at":"2026-10-15T19:50:30Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3 · green card filings: 2","filings_12m":3,"filings_prev_12m":7,"green_card_filings_12m":2,"median_offered_wage_usd":141500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.869,"p_room":0.75,"age_days":20,"expected_fill_days":28,"reasons":["conf:4","velocity","win:late","comp:junior"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":85000,"is_top_pay":false},"html_url":"https://alion.io/job/situsamc-client-assurance-infosec-grc-remote-us","json_url":"https://alion.io/job/situsamc-client-assurance-infosec-grc-remote-us.json","meta":{"generated_at":"2026-11-06T02:53:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4896,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2786781},"rest":"https://alion.io/mcp/rest/get_company?id=2786781"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsitusamc-client-assurance-infosec-grc-remote-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsitusamc-client-assurance-infosec-grc-remote-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsitusamc-client-assurance-infosec-grc-remote-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/situsamc-client-assurance-infosec-grc-remote-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsitusamc-client-assurance-infosec-grc-remote-us"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2644957}},{"tool":"search_jobs","arguments":{"company":"situsamc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2644957},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}