MiddleRemoteUS
Client Assurance Specialist
О роли
Описание вакансии
About the company
- Position listed on behalf of a partner company managing applications
- Role based in the United States
Responsibilities
- Manage client assurance requests: security questionnaires, due diligence assessments, cybersecurity RFPs/RFIs, cloud security, AI governance, vulnerability management inquiries
- Coordinate response workflows: prioritize requests, set deadlines, assign questions to SMEs, monitor progress, escalate delays
- Prepare and validate security responses using approved policies and standards
- Manage security evidence and documentation: policies, procedures, penetration testing summaries, training records, architecture docs, API info, configuration evidence
- Protect sensitive information: redaction, confidentiality markings, minimum necessary disclosure
- Support audits and remediation tracking: coordinate internal technology audits, document findings, monitor corrective action plans
- Monitor client-identified findings: audit observations, external security ratings, penetration testing findings
- Maintain reporting and operational visibility: trackers, evidence repositories, monthly/quarterly reports
- Improve processes: maintain SOPs, expand reusable response libraries
- Provide additional GRC support: third-party risk assessments
Requirements
- Associate or bachelor's degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies or related, or equivalent experience
- ~2–4 years in information security compliance, client assurance, IT audit, GRC or comparable analytical role
- Experience with security questionnaires (SIG, CAIQ), client audits, evidence collection, request trackers
- Knowledge of IAM, vulnerability management, application and cloud security, incident response, security awareness
- Familiarity with SOC 2, ISO 27001, NIST Cybersecurity Framework
- Strong attention to detail, critical thinking, project coordination
- Excellent written and verbal communication, stakeholder management
- Proficiency in Microsoft Excel, Word, PowerPoint
- Professional judgment and confidentiality
- Preferred: CompTIA Security+, CISA, ISO/IEC 27001 Lead Auditor/Implementer
Стек и навыки
С чем работаем