Information Security Client Compliance Analyst

ISS STOXX•Norman, OK

1d•Hybrid

About The Position

This role plays a key part in supporting our clients and internal teams by coordinating information security due diligence activities in a professional, clear, and service‑oriented manner. This is a customer‑facing coordination role, ideal for someone who enjoys working with people, managing requests, and ensuring a smooth, positive client experience. While prior knowledge of information security or GRC is an advantage, a strong willingness to learn and develop in this area is essential.

Requirements

Excellent written and verbal communication skills
Strong customer service mindset, with a professional and helpful approach
Highly organized, with good attention to detail
Ability to manage multiple requests and deadlines simultaneously
Comfortable working with a variety of stakeholders at different levels
2- 5 years of prior experience, preferably in an information security or client facing role.
Bachelor's degree preferred, equivalent experience and/or certifications also considered.

Nice To Haves

Basic understanding of information security, risk, compliance, or GRC concepts
Experience responding to client questionnaires or third‑party assessments
Familiarity with standards such as ISO 27001, SOC 2, or supplier due diligence processes
Full support will be provided to build knowledge in information security and GRC
Ideal for someone early in their infosec or risk career, or transitioning into the field
A positive attitude and willingness to learn are more important than deep technical expertise

Responsibilities

Act as the primary point of contact for client information security due diligence requests
Communicate clearly and professionally with clients, vendors, and internal stakeholders
Explain information security concepts and processes in plain, non‑technical language
Track requests and provide regular updates to ensure expectations are managed effectively
Coordinate the completion of client security questionnaires and due diligence requests
Gather required information from internal teams (e.g. IT, Security, Legal, Compliance)
Ensure responses are accurate, consistent, and submitted on time
Maintain records of completed due diligence activities and supporting evidence
Help improve templates, FAQs, and standard responses to enhance efficiency and clarity
Identify common client questions or pain points and suggest improvements
Support broader GRC initiatives where needed