Remote IT & Security Compliance Analyst II

GFB; Macon (GA); On-site; USD 65,000 - 90,000; Full time

Job summary

GFB is seeking a Security & Compliance Analyst to help develop and refine security policies, map controls to industry frameworks, and conduct risk assessments. You will coordinate with internal teams and vendors to ensure regulatory alignment and effective remediation of findings.

The role requires strong communication, documentation, and the ability to translate complex requirements into actionable guidance. On-site position with growth opportunities in a evolving security program.

Qualifications

• Bachelor's degree or equivalent in IT, security, risk, or related field.
• Experience in information security, compliance, governance, risk management, or audit.
• Familiarity with security policies, standards, procedures.
• Exposure to risk assessments, control testing, audit support.

Responsibilities

• Adhere to, evaluate, and assist in the development of security policies, standards, and procedures; recommend updates to align with legal, regulatory, and business requirements.
• Perform security and compliance assessments to evaluate adherence to internal policies, standards, and applicable regulatory frameworks.
• Assist in identifying control gaps, document findings, and support remediation activities.
• Track compliance status, risks, exceptions, and remediation activities, ensuring documentation and evidence is maintained.
• Assist in internal and external risk assessments, including identifying, analyzing, and documenting security and compliance risks.
• Maintain knowledge of relevant security and privacy frameworks and regulations (e.g., NIST, CIS, ISO, NAIC, PCI, SOX, HIPAA).
• Deliver guidance and awareness materials to internal teams based on established policies and direction.
• Monitor regulatory changes and provide updates to management for review and direction.
• Prepare compliance metrics, status reports, and risk summaries for management review.
• Document activities, assessments, issues, and remediation tracking in designated systems or tools.
• Complete tasks and projects as assigned.
• Escalate issues, risks, and exceptions to management.

Skills

Policy development

Security governance

Risk assessment

Compliance awareness

Documentation

Stakeholder communication

Education

Bachelor’s degree in Information Technology, Information Security, Risk Management, Business

Tools

NIST CSF

NIST SP 800-53

ISO/IEC 27001

CIS Controls

Job description

GFB is seeking a Security & Compliance Analyst to help develop and refine security policies, map controls to industry frameworks, and conduct risk assessments. You will coordinate with internal teams and vendors to ensure regulatory alignment and effective remediation of findings.

The role requires strong communication, documentation, and the ability to translate complex requirements into actionable guidance. On-site position with growth opportunities in a evolving security program.