IT Security Audit Specialist

Benefits

Our employees appreciate our family-oriented culture, and we make sure their benefits reflect that. In addition to a competitive salary and bonuses, medical/dental/vision plan, 401(k) plan with a generous company match, you will be eligible for benefits such as:

• Potential for hybrid work schedule after training is completed.
• Paid Parental leave and Caregiver leave.
• Employee appreciation events.
• Employee Assistance Program (EAP) for support when you and your family need it.
• On-site cafeteria and fitness center.

Requirements

• Experience: At least 3 to 7 years of experience in cybersecurity, IT audit, security compliance, technology risk, information technology, or a related field. Experience with cybersecurity frameworks, security control assessments, audit evidence collection, technical documentation, or internal/external audit support preferred. Experience working with NIST SP 800-171, NIST SP 800-53, or similar control-based cybersecurity frameworks strongly preferred.
• Education: Associate's Degree (Bachelor's Degree preferred) in Cybersecurity, Information Technology, Computer Science, MIS, Information Assurance, Risk Management or a related field.
• Skills: Relevant cybersecurity, audit, or compliance certifications preferred, including: CompTIA Security+, ISACA CISA, ISACA CRISC, ISC2 Certified in Cybersecurity (CC), GIAC GSEC, Other applicable security, audit, risk, or compliance certifications.

Key Responsibilities

• Coordinates and supports annual assessment activities and year-round compliance readiness.
• Conducts assessment planning, evidence collection and validation, control reviews, assessor requests, stakeholder coordination, and identification of control or evidence gaps.
• Performs risk-based assessments of technical and administrative security controls to validate that controls are appropriately designed, implemented, documented, and operating as intended.
• Conducts reviews of identity and access management, endpoint security, vulnerability and patch management, logging and monitoring, and configuration management.
• Documents assessment findings and control deficiencies.
• Evaluates associated risk and coordinate corrective actions with control owners.
• Maintains audit evidence, workpapers, control documentation, findings, remediation records, policies, standards, and procedures.
• Performs ongoing security audits and control reviews outside the annual assessment cycle, monitoring recurring findings and control trends.
• Recommends improvements to security controls and audit processes.
• Provides guidance to technical and business stakeholders regarding security, compliance, documentation, and evidence requirements.

Additional information

This position is not eligible for sponsorship for work authorization by Farmers Mutual Hail Insurance Company, SI. Therefore, if you will require sponsorship for work authorization now or in the future, we cannot consider your application at this time.

Farmers Mutual Hail Insurance Company does not discriminate in employment (EOE). All qualified applicants are encouraged to apply.