Security and Compliance Specialist

FBT Gibbons LLP is a national law firm focused on serving companies operating and investing in the middle market. With nearly 1,500 employees across 25 offices, we support clients ranging from large multinationals to mid-sized businesses and growth-oriented startups across the United States. Our teams collaborate across departments and geographies to deliver excellent service to our clients, colleagues, and the communities we serve.

At FBT Gibbons, diversity enriches our vibrant culture and empowers our teams to achieve more together. We welcome talented professionals who bring valuable skills, a collaborative mindset, and a shared commitment to helping our firm and clients thrive. Here, you’ll make meaningful contributions, collaborate with exceptional colleagues, and build a career that grows with your skills and ambitions.

We are currently seeking a Security and Compliance Specialist to support the firm’s information security, compliance, and risk‑management initiatives within a collaborative, client‑focused environment. This role offers the opportunity to contribute meaningfully to a national law firm by strengthening security practices, enhancing operational processes, and partnering with talented professionals across departments.

The ideal candidate thrives in a collaborative, cross functional environment; communicates effectively with both technical and non-technical teams; and demonstrates sound judgment in identifying, escalating, and resolving compliance issues.

This position can be based in Charleston, WV; Cincinnati, OH; Columbus, OH; Dallas, TX; Florence, KY; Houston, TX; Indianapolis, IN, Lexington, KY; Louisville, KY; Nashville, TN; Pittsburgh, PA; or West Chester, OH.

Key Responsibilities:

• Complete baseline security and compliance reviews of outside counsel guidelines from clients and escalate potential issues as they arise.
• Review and prepare client security assessments and questionnaires prior to final submission, collaborating with cross‑functional teams to address firm security requirements, and assist in establishing baseline security standards for FBT Gibbons–owned devices based on specific client expectations.
• Maintain an ongoing understanding and purview of regulatory and contractual requirements to ensure current processes meet expectations, and develop programming where gaps exist.
• Create and monitor standardized internal processes to ensure consistency with overall operational risk management goals.
• Create and maintain data maps for client data.
• Support the ongoing development, documentation, and maintenance of the firm’s Information Security Management System (ISMS) and Privacy Information Management System (PIMS) in support of ISO/IEC 27001 and ISO/IEC 27701 certification, including evidence collection and review.
• Participate in the ongoing development, documentation, and maintenance of the firm’s Vendor Risk Management Program.
• Support the full lifecycle management of firm projects and vendor relationships, including vendor identification, vendor risk assessments, contract execution, account management, and termination.
• Investigate and respond to Data Loss Prevention (DLP) alerts, including Microsoft Purview, NetDocuments, and Mimecast.
• Maintain KnowBe4 simulated phishing campaigns and new hire training campaigns. Assist with review of submitted phishing emails as needed.
• Support security and compliance initiatives by assisting with help desk ticket intake and resolution during high-volume periods, including targeted phishing events, providing user support, reinforcing secure behaviors, and ensuring appropriate incident tracking, escalation, and reporting.
• Maintain existing compliance tools and provide recommendations based on knowledge and practical application of industry best practices to manage compliance and reduce risk. Advise management of current industry trends and operational risk threats.
• Participate in internal and external compliance reviews and requests for mutually approved artifacts.

Job Requirements:

• Bachelor’s Degree required.
• Minimum of 3 years of relevant experience in information security, compliance, or IT support, preferably in a professional services environment.
• Strategic understanding of IT security and technology.
• Strong analytical, critical thinking and attention to detail.
• Excellent written and verbal communication skills, with the ability to articulate complex technical ideas clearly to Legal and IT staff.
• Self-motivated, with the ability to lead and educate others at all levels on the significance and value of information and physical security.
• Strong technical expertise, including proficiency with malware analysis tools, Sandboxes, Linux, Windows OS.

FBT Gibbons is fully committed to equality of opportunity in all aspects of employment. It is the policy of FBT Gibbons to provide equal employment opportunity to all employees and applicants without regard to race, color, religion, national or ethnic origin, military status, veteran status, age, gender, gender identity or expression, sexual orientation, genetic information, physical or mental disability or any other protected status.

FBT Gibbons offers a competitive salary and a comprehensive benefits package, including health care coverage (medical, dental, and vision), life insurance, short- and long-term disability, paid parental leave, employee wellbeing and EAP programs, paid time off, and a 401(k) retirement plan with employer matching and profit-sharing. Benefit offerings and eligibility vary by location and are subject to applicable plan terms and legal requirements.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

Applicants must be authorized to work in the United States without current or future employer sponsorship. FBT Gibbons does not provide visa sponsorship for this position.

#LI-remote