IT Security Audit Specialist

At Farmers Mutual Hail (FMH), our mission is simple: protect the livelihoods and legacies of America’s farmers through the complete farm insurance solutions we offer. As America’s Crop Insurance Company™, we’re headquartered in the U.S. and have been owned by the farmers we insure for over 125 years.

• Potential for hybrid work schedule after training is completed. 
• Paid Parental leave and Caregiver leave.
• Employee appreciation events.
• Employee Assistance Program (EAP) for support when you and your family need it.
• On-site cafeteria and fitness center.

• Experience: At least 3 to 7 years of experience in cybersecurity, IT audit, security compliance, technology risk, information technology, or a related field. Experience with cybersecurity frameworks, security control assessments, audit evidence collection, technical documentation, or internal/external audit support preferred. Experience working with NIST SP 800-171, NIST SP 800-53, or similar control-based cybersecurity frameworks strongly preferred.
• Education: Associate’s Degree (Bachelor’s Degree preferred) in Cybersecurity, Information Technology, Computer Science, MIS, Information Assurance, Risk Management or a related field.
• Skills: Relevant cybersecurity, audit, or compliance certifications preferred, including: CompTIA Security+, ISACA CISA, ISACA CRISC, ISC2 Certified in Cybersecurity (CC), GIAC GSEC, Other applicable security, audit, risk, or compliance certifications.

• Coordinates and supports annual assessment activities and year-round compliance readiness.
• Conducts assessment planning, evidence collection and validation, control reviews, assessor requests, stakeholder coordination, and identification of control or evidence gaps.
• Performs risk-based assessments of technical and administrative security controls to validate that controls are appropriately designed, implemented, documented, and operating as intended.
• Conducts reviews of identity and access management, endpoint security, vulnerability and patch management, logging and monitoring, and configuration management.
• Documents assessment findings and control deficiencies.
• Evaluates associated risk and coordinate corrective actions with control owners.
• Maintains audit evidence, workpapers, control documentation, findings, remediation records, policies, standards, and procedures.
• Performs ongoing security audits and control reviews outside the annual assessment cycle, monitoring recurring findings and control trends.
• Recommends improvements to security controls and audit processes.
• Provides guidance to technical and business stakeholders regarding security, compliance, documentation, and evidence requirements.

This position is not eligible for sponsorship for work authorization by Farmers Mutual Hail Insurance Company, SI. Therefore, if you will require sponsorship for work authorization now or in the future, we cannot consider your application at this time.

Farmers Mutual Hail Insurance Company does not discriminate in employment (EOE). All qualified applicants are encouraged to apply.