> Markdown version of [/jobs/ext/2718151-information-security-grc-specialist-customer-trust](https://www.wearedevelopers.com/jobs/ext/2718151-information-security-grc-specialist-customer-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security GRC Specialist - Customer Trust

- **Company:** HireRight, LLC
- **Location:** Bethlehem, KY, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** JIRA, Cloud Computing, Cyber Security, Information Security Management, Information Technology
- **Published:** September 4, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3376853207&tx=KR2121FFG&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or a related field.
 * 3-5 years of experience supporting Information Security, GRC, or Customer Trust functions, including customer security questionnaires, audits, assessments, and customer-facing security programs.
 * Working knowledge of information security and privacy frameworks such as ISO 27001, SOC 2, GDPR, FCRA, or similar regulatory and compliance standards.
 * Experience supporting third-party assurance activities; familiarity with Conveyor, CAIQ, HECVAT, SIG, or similar assessment frameworks is a plus.
 * Experience managing customer trust portals and security knowledge repositories is preferred.
 * Relevant certifications such as CISA, CISSP, ISO 27001 Lead Auditor, or similar are preferred.
 * Strong project management and organizational skills; Jira experience is a plus.
 * Familiarity with core IT infrastructure, cloud technologies, and information security concepts.
 * Excellent customer service, relationship management, written, and verbal communication skills.
 * Self-motivated professional with strong analytical abilities, attention to detail, and the ability to work independently while collaborating effectively across teams.
 * English proficiency required, as the role involves frequent customer-facing interactions and communications.

## Description

This role reports to the Sr. Manager of Information Security GRC and is responsible for supporting the organization's Customer Trust program. The GRC Customer Trust Specialist helps manage information security compliance, risk management, third-party assurance activities, and governance processes that support customer-facing security and compliance commitments.

This position serves as a key liaison between Information Security, internal stakeholders, customers, and external partners by facilitating security assessments, responding to customer due diligence requests, coordinating audits, and maintaining documentation that demonstrates the organization's security posture. The role also assists with compliance monitoring, risk identification, remediation tracking, and process improvement initiatives to ensure continued alignment with internal policies, regulatory requirements, and industry standards., * Lead customer-facing security activities, including security questionnaires, risk assessments, audits, project security reviews, and remediation tracking.

 * Respond to customer requests for security, compliance, and privacy information by coordinating evidence collection and communicating the organization's security posture.
 * Serve as the primary liaison for customer trust engagements, leveraging established procedures to manage assessments, audits, and due diligence requests.
 * Evaluate customer security requests, identify opportunities for improvement, and communicate recommendations to management and key stakeholders.
 * Partner with business units and cross-functional teams to support customer requirements and ensure timely completion of security and compliance deliverables.
 * Review corrective action plans and advise stakeholders on remediation strategies for compliance gaps, audit findings, and identified vulnerabilities.
 * Continuously enhance customer trust processes, documentation, and knowledge resources.
 * Perform additional compliance, governance, and risk-related duties as assigned.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)
- [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)