Jobs and Careers

Information Security Client Compliance Analyst

United Statesfull_timeVerifiedPosted 23 Jun 2026

About the role

Let’s be #BrilliantTogether

We are looking for a Client Compliance Analyst to join our Information Security Governance, Risk, and Compliance (GRC) function. This role plays a key part in supporting our clients and internal teams by coordinating information security due diligence activities in a professional, clear, and service‑oriented manner.

This is a customer‑facing coordination role, ideal for someone who enjoys working with people, managing requests, and ensuring a smooth, positive client experience. While prior knowledge of information security or GRC is an advantage, a strong willingness to learn and develop in this area is essential.

Key Responsibilities

Client & Stakeholder Communication

Act as the primary point of contact for client information security due diligence requests
Communicate clearly and professionally with clients, vendors, and internal stakeholders
Explain information security concepts and processes in plain, non‑technical language
Track requests and provide regular updates to ensure expectations are managed effectively

Due Diligence Coordination

Coordinate the completion of client security questionnaires and due diligence requests
Gather required information from internal teams (e.g. IT, Security, Legal, Compliance)
Ensure responses are accurate, consistent, and submitted on time
Maintain records of completed due diligence activities and supporting evidence

Process & Quality Improvement

Help improve templates, FAQs, and standard responses to enhance efficiency and clarity
Identify common client questions or pain points and suggest improvements
Support broader GRC initiatives where needed

Skills & Experience

Essential:

Excellent written and verbal communication skills
Strong customer service mindset, with a professional and helpful approach
Highly organized, with good attention to detail
Ability to manage multiple requests and deadlines simultaneously
Comfortable working with a variety of stakeholders at different levels
2- 5 years of prior experience, preferably in an information security or client facing role.
Bachelor's degree preferred, equivalent experience and/or certifications also considered.

Preferred:

Basic understanding of information security, risk, compliance, or GRC concepts
Experience responding to client questionnaires or third‑party assessments
Familiarity with standards such as ISO 27001, SOC 2, or supplier due diligence processes

Learning & Development

Full support will be provided to build knowledge in information security and GRC
Ideal for someone early in their infosec or risk career, or transitioning into the field
A positive attitude and willingness to learn are more important than deep technical expertise

Who This Role Suits

This role is well suited to someone who:

Enjoys working in a client‑facing or service‑oriented role
Is confident communicating complex topics in a clear, friendly way
Wants to develop a career in information security without needing a technical background

#LI-JB1 #ASSOCIATE

What You Can Expect from Us

At ISS STOXX, our people are our driving force. We are committed to building a culture that values diverse skills, perspectives, and experiences. We hire the best talent in our industry and empower them with the resources, support, and opportunities to grow—professionally and personally.

Together, we foster an environment that fuels creativity, drives innovation, and shapes our future success.

Let’s empower, collaborate, and inspire.

Let’s be #BrilliantTogether.

About ISS STOXX

ISS STOXX GmbH is a leading provider of research and technology solutions for the financial market. Established in 1985, we offer top-notch benchmark and custom indices globally, helping clients identify investment opportunities and manage portfolio risks. Our services cover corporate governance, sustainability, cyber risk, and fund intelligence. Majority-owned by Deutsche Börse Group