Information Security GRC Analyst

Serving as a primary coordinator for customer security inquiries, the full-time remote Information Security GRC Analyst will manage client security questionnaires, support internal audits, and ensure compliance with regulatory requirements while collaborating with various internal teams. Key responsibilities Serve as the primary intake point for client security due diligence, managing requests and drafting responses using approved policies and standards Collect and organize supporting evidence for security assessments, ensuring accuracy and confidentiality before release Track client-identified findings and support internal technology audits by coordinating evidence requests and documenting results Required qualifications Bachelor's or Associate degree in Risk Management, Information Systems, Cybersecurity, Finance, Legal Studies, or a related field, or equivalent experience 2-4 years of relevant experience in information security compliance, client assurance, or governance, risk, and compliance (GRC) Hands-on experience with security questionnaires and client audits, including maintaining trackers and following up on items Working knowledge of information security domains such as IAM, vulnerability management, and cloud security Familiarity with common security frameworks like SOC 2, ISO 27001, and NIST CSF Virtual Vocations Inc