Information Security Client Compliance Analyst

Let’s be #Brilliant Together

We are looking for a Client Compliance Analystto join our Information Security Governance, Risk, and Compliance (GRC) function. This role plays a key part in supporting our clients and internal teams by coordinating information security due diligence activities in a professional, clear, and service-oriented manner.

This is a customer-facing coordination role, ideal for someone who enjoys working with people, managing requests, and ensuring a smooth, positive client experience. While prior knowledge of information security or GRC is an advantage, a strong willingness to learn and develop in this area is essential.

• Act as the primary point of contact for client information security due diligence requests
• Communicate clearly and professionally with clients, vendors, and internal stakeholders
• Explain information security concepts and processes in plain, non-technical language
• Track requests and provide regular updates to ensure expectations are managed effectively

• Coordinate the completion of client security questionnaires and due diligence requests
• Gather required information from internal teams (e.g. IT, Security, Legal, Compliance)
• Ensure responses are accurate, consistent, and submitted on time
• Maintain records of completed due diligence activities and supporting evidence

• Help improve templates, FAQs, and standard responses to enhance efficiency and clarity
• Identify common client questions or pain points and suggest improvements
• Support broader GRC initiatives where needed

• Excellent written and verbal communication skills
• Strong customer service mindset, with a professional and helpful approach
• Highly organized, with good attention to detail
• Ability to manage multiple requests and deadlines simultaneously
• Comfortable working with a variety of stakeholders at different levels
• 2- 5 years of prior experience, preferably in an information security or client facing role.
• Bachelor's degree preferred, equivalent experience and/or certifications also considered.

• Basic understanding of information security, risk, compliance, or GRC concepts
• Experience responding to client questionnaires or third-party assessments
• Familiarity with standards such as ISO 27001, SOC 2, or supplier due diligence processes

• Full support will be provided to build knowledge in information security and GRC
• Ideal for someone early in their infosec or risk career, or transitioning into the field
• A positive attitude and willingness to learn are more important than deep technical expertise

This role is well suited to someone who:

• Enjoys working in a client-facing or service-oriented role
• Is confident communicating complex topics in a clear, friendly way
• Wants to develop a career in information security without needing a technical background

• Medical, Dental, and Vision coverage
• 401(k) with a company match up to 9%, including a Safe Harbor contribution
• Flexible Spending Account (FSA) and commuter benefit programs
• Generous paid time off
• Volunteer Day
• Paid parental leave
• Hybrid working options

Institutional Shareholder Services Inc. (ISS) is an equal employment opportunity employer and does not discriminate against any employee or applicant because of race, color, ethnicity, creed, religion, sex, age, height, weight, citizenship status, national origin, social origin, sexual orientation, gender identity or gender expression, pregnancy status, marital status, familial status, mental or physical disability, veteran status, military service or status, genetic information, or any other characteristic protected by law (referred to as “protected status”).

All activities including, but not limited to, recruiting and hiring, recruitment advertising, promotions, performance appraisals, training, job assignments, compensation, demotions, transfers, terminations (including layoffs), benefits, and other terms, conditions, and privileges of employment, are and will be administered on a non-discriminatory basis, consistent with all applicable federal,…