Security Risk and Compliance Specialist

Security Risk and Compliance Specialist
(Atlanta, Full-time Hybrid)

Fisher Phillips, a premier international labor and employment law firm, is seeking a skilled and experienced Security Risk and Compliance Specialist to join our team. In this essential role, you will contribute to the seamless operation of our services, providing crucial support to our department in delivering exceptional client service and maintaining our commitment to excellence.

The Security Risk and Compliance Specialist supports the Director of Information Security in managing security-related contractual obligations and compliance requirements. This role ensures organizational compliance with internal policies and is responsible for reviewing contractual commitments and actual controls, assisting with remediation planning, and contributing to security awareness materials. The ideal candidate is an analytical, detail-oriented professional who thrives in a fast-paced environment and is adept at managing risk while enabling business operations. This role is essential to ensuring, compliance requirements are met, and security risks are identified and mitigated in a timely manner.

Key Responsibilities

Contract & Agreement Review:

• Review client and vendor agreements for security and compliance requirements
• Analyze security-related terms to ensure commitments align with firm policies, procedures, and technical capabilities
• Identify and document gaps between contractual requirements and current security controls
• Collaborate with the Director of Information Security to prioritize and escalate identified gaps
• Assist with drafting and negotiating security terms in new contracts

Compliance & Risk Management:

• Support security risk assessments for vendor engagements and client obligations.
• Maintain documentation of security requirements, gaps, and mitigation plans.
• Lead or assist with compliance audits (e.g., SOC 2, HIPAA, GDPR, CCPA, PCI-DSS, ISO 27001) by gathering evidence and managing documentation.
• Maintain and update compliance documentation, including policies, standards, and procedures.
• Coordinate responses to client security questionnaires and due diligence requests.
• Work with Information Governance, Legal, and IT teams to maintain privacy and contractual requirements

Security Awareness & Training:

• Support the development and delivery of security training and phishing simulation programs
• Create internal communications and awareness campaigns to foster a security-conscious
  culture
• Help ensure training content aligns with client, vendor, and regulatory security
  requirements
• Assist the Director of Information Security in planning and tracking awareness initiatives

Policy Management & Documentation:

• Draft, review, and maintain information security policies, standards, procedures, and<