Client Assurance - InfoSec GRC (Cybersecurity)

Location: Remote within the United States

Annual full-time base salary: $70,000–$85,000

Company

hirify.global provides technology and professional services for the real estate industry.

What you will do

• Coordinate client security questionnaires, due diligence requests, RFP/RFI security sections, and topic-specific inquiries from intake through delivery.
• Route questions to subject matter experts, manage deadlines and follow-ups, and coordinate client meetings, audit walkthroughs, and onsite client visits.
• Collect, validate, organize, redact, and securely deliver policies, standards, penetration test summaries, architecture documentation, and other supporting evidence.
• Track audit findings, security-rating findings, penetration-test findings, corrective action plans, and remediation updates.
• Support internal technology audits, control assessments, and third-party risk assessments.
• Maintain request trackers, evidence repositories, standard operating procedures, metrics, and leadership reports while improving response processes.

Requirements

• Bachelor’s or Associate degree in risk management, information systems, cybersecurity, finance, legal studies, or a related field, or equivalent experience.
• 2–4 years of relevant experience in information security compliance, client assurance, IT audit, or GRC.
• Hands-on experience coordinating security questionnaires, client audits, evidence requests, trackers, and follow-through.
• Working knowledge of IAM, vulnerability management, application and cloud security, incident response, and security awareness.
• Familiarity with SOC 2, ISO 27001, and NIST CSF, plus strong analytical, organizational, communication, and project coordination skills.
• Proficiency with Microsoft Excel, Word, and PowerPoint, including reports, dashboards, and management documentation.

Nice to have

• CompTIA Security+, CISA, or ISO/IEC 27001 Lead Auditor or Lead Implementer certification, or progress toward one.
• Familiarity with FFIEC, GLBA, or NYDFS Part 500 requirements.
• Experience with GRC, questionnaire automation, or trust center platforms such as Optro, UpGuard, ServiceNow, OneTrust, Whistic, or SafeBase.
• Exposure to AI governance inquiries or vendor risk assessments.
• Experience in financial services or professional services.

Culture & Benefits

• Remote full-time work for candidates in the United States.
• Paid time off and paid holidays.
• Medical, dental, vision, life, and disability insurance.
• 401(k) participation and potential discretionary bonus eligibility.
• Cross-functional collaboration with Information Security, Product, Technology, Legal, and business teams across regions.