Key Responsibilities:

- Lead the intake, scoping, prioritization, and end-to-end management of DDQs, RFPs, and client security information requests.

- Draft, review, refine, and finalize responses in alignment with Information Security and Compliance guidelines.

- Map client questions to relevant internal controls, certifications, policies, and security requirements.

- Coordinate with CISO, GRC, Legal, Engineering, Compliance, and regional teams to gather accurate information and supporting evidence.

- Perform detailed quality assurance (QA) of responses to ensure accuracy, consistency, completeness, and compliance.

- Maintain a centralized repository of approved responses, supporting documentation, and version-controlled content.

- Support French-language translation workflows for client questionnaires and responses.

- Identify and implement process improvements to enhance response quality, efficiency, and turnaround time.

- Guide and mentor junior analysts and contribute to best practices for DDQ/RFP management.

Required Skills & Experience:

- 7 - 12 years of experience in DDQ/RFP management, GRC, Vendor Risk Management, Information Security, or related roles.

- Strong knowledge of information security and compliance frameworks, including ISO 27001, SOC 2, and NIST CSF.

- Strong understanding of information security controls, policies, certifications, and compliance requirements.

- Excellent written and verbal communication skills, with strong attention to detail.

- Proven experience working with global stakeholders and cross-functional teams.

- Strong organizational and prioritization skills, with the ability to manage multiple concurrent requests and deadlines.

Preferred Qualifications:

- Experience working with global Financial Services clients or within a highly regulated industry.

- Exposure to client security assessments, third-party risk, or vendor risk management.

- Experience supporting multilingual or French-language client response workflows.

- Familiarity with DDQ/RFP response management tools, knowledge repositories, and document/version control systems.