Mid-level GRC analyst on SitusAMC's Information Security team who coordinates client security questionnaires (SIG, CAIQ, RFP sections), due diligence requests, and evidence packages from intake to delivery, while supporting internal audits and tracking findings through remediation. Requires 2-4 years in GRC/client assurance with knowledge of SOC 2, ISO 27001, and NIST CSF.