DESCRIPTION OF ESSENTIAL DUTIES:
- Adhere to, evaluate, and assist in the development of security policies, standards, and procedures; recommend updates to align with legal, regulatory, and business requirements.
- Perform security and compliance assessments to evaluate adherence to internal policies, standards, and applicable regulatory frameworks.
- Assist in identifying control gaps, document findings, and support management and stakeholders in remediation activities.
- Track compliance status, risks, exceptions, and remediation activities, ensuring appropriate documentation and evidence is maintained.
- Assist in internal and external risk assessments, including identifying, analyzing, and documenting security and compliance risks.
- Maintain working knowledge of relevant security and privacy frameworks and regulations (e.g., NIST, CIS, ISO, NAIC, PCI, SOX, HIPAA, or similar, as applicable).
- Assist in delivering guidance and awareness materials to internal teams based on established policies and direction.
- Monitor changes in regulatory requirements, industry standards, and emerging risks, and provide updates to management for review and direction.
- Prepare compliance metrics, status reports, and risk summaries for management review.
- Document activities, assessments, issues, and remediation tracking within designated systems or tools.
- Complete task and project work as assigned.
- Escalates issues, risks, and exceptions to management for review and decision-making.
OTHER RESPONSIBILITIES/REQUIREMENTS:
- Develop and maintain positive working relationships with internal and third-party vendors as needed.
- Provide management and team members with clear, accurate, and timely information regarding compliance posture, risks, and issues.
- Continually improve the security program by identifying gaps in documentation, processes, or controls, and recommending enhancements.
- Demonstrate strong communication and interpersonal skills with the ability to interact effectively with both technical and non‑technical stakeholders.
- Support team members by sharing knowledge of security and compliance practices.
- Ability to follow sound business ethics when executing job responsibilities.
- Demonstrate a commitment to continuous learning and professional development.
- Be a self-motivated individual with the ability to complete assigned tasks and priorities within established timelines, escalating issues or competing demands to management as needed.
QUALIFICATION, EDUCATION AND EXPERIENCE REQUIREMENTS:
- Bachelor’s degree in Information Technology, Information Security, Risk Management, Business, or a related field, or an equivalent combination of education, training, and experience.
- Background or experience in information security, compliance, governance, risk management, audit, IT operations, or a related discipline is desired.
- Familiarity with developing, maintaining, reviewing, or assessing security policies, standards, and procedures.
- Exposure to security or compliance assessments, risk evaluations, audit support activities, or control testing is beneficial.
- General understanding of IT systems, security controls, and enterprise technology environments.
- Experience working with, interpreting, or mapping controls to recognized frameworks such as NIST CSF, NIST SP 800‑53, CIS Controls, ISO/IEC 27001, or similar.
- Knowledge of regulatory, legal, or contractual security and compliance expectations in regulated or complex environments.
- Security-related professional certifications (e.g., Security+, CISSP, CISA, CISM, CRISC, or similar) are a plus.
- Strong organizational, analytical, and documentation skills with attention to detail.
- Ability to interpret requirements and translate them into clear, practical, and business-aligned guidance.
- Strong written and verbal communication skills, with the ability to engage effectively with both technical and non‑technical stakeholders.
- Demonstrates curiosity and willingness to learn, with interest in understanding the “what,” “why,” and “how” behind security controls and compliance requirements.
- Self-motivated, adaptable, and comfortable working in an evolving security and compliance program.
SUPERVISORY RESPONSIBILITIES:
None
PHYSICAL DEMANDS/WORK ENVIRONMENT:
None
The above statements reflect the general details necessary to describe the principle functions of the occupation described and shall not be construed as a detailed description of all the work requirements that may be inherent in the occupation.
Bachelor's degree or equivalent experience; security, compliance, governance, risk, audit, or IT background desired. Requires framework knowledge, analytical and documentation skills, and strong communication.
Key Responsibilities
- assessing controls
- tracking compliance
- documenting risks
Skills & Tools
NIST, CIS, ISO, NAIC, PCI, SOX, HIPAA, NIST CSF, NIST SP 800-53, CIS Controls, ISO/IEC 27001
Job Details
- Category: Legal and Compliance
- Seniority: Mid Level
- Commitment: Full Time
- Workplace: Remote — Macon, Georgia, United States
- Languages: English
About Georgia Farm Bureau
An agricultural organization supporting farmers and promoting agricultural interests. — Industry: Agriculture