Sr. Governance Risk and Compliance Associate - Third Party Risk - Remote US

• Bachelors degree in related field or equivalent combination of education and experience
• 5+ years of industry and/or relevant experience, typically with 1+ years in an Associate level role or external equivalent.
• 4+ years in Governance, Risk, Compliance, Audit, or Cybersecurity roles.
• Have at least one certification (e.g., CISSP, CISM, CISA, CRISC, CCSP, or equivalent).
• Experience applying risk management frameworks to support the identification and tracking of risks and risk action items.
• Demonstrated ability to assist with risk assessments, support compliance gap analyses, and contribute to remediation planning.
• Hands-on proficiency with Information Security tools and products related to attack surface management, email security, data security posture management, and data loss prevention.
• Practical experience supporting Third-Party Risk Management (TPRM) activities and vendor assessments.
• Working knowledge of incident investigation techniques and contributing to incident response activities.
• Ability to craft policies, identify compliance issues, and create risks for tracking.
• Broad understanding of cybersecurity principles and network security.
• Knowledge of various endpoints and operating systems (Mac, Windows, Linux).
• Familiarity with cloud security best practices (AWS and Azure,).
• Ability to create, track, improve, and report on Key Risk Indicators (KRIs).
• Solid Understanding of regulatory requirements and frameworks (e.g., GDPR, CCPA, PCI, SOX, GLBA, NIST).
• Basic Understand how compliance with laws and regulations influences security strategy.
• Strong analytical, problem-solving, and interpersonal skills.
• Excellent communication, documentation, and stakeholder management skills.
• Ability to produce reports, dashboards, and technical documentation.

#LI-REMOTE #LI-AS1

Note: This job description is not intended to be all inclusive or exclusive.

At any time, employees may perform other related duties as required to meet the ongoing needs of the organization and participate in additional trainings.

SitusAMC does not accept unsolicited resumes from staffing agencies, search firms or any third parties.

Any unsolicited resume submitted to SitusAMC in any manner will be considered SitusAMC property, and SitusAMC will not pay a fee for any placement resulting from the receipt of an unsolicited resume.

The annual full time base salary range for this role is

Specific compensation is determined through interviews and a review of relevant education, experience, training, skills, geographic location and alignment with market data.

Additionally, certain positions may be eligible to receive a discretionary bonus as determined by bonus program guidelines, position eligibility and SitusAMC Senior Management approval.

SitusAMC offers PTO and paid holidays, the terms of which are set forth in the program policies.

All full time employees also are eligible to participate in various benefit plans, including medical, dental, vision, life, disability insurance and 401K; in each case in accordance with the terms of the applicable plans.