Cybersecurity Audit & Compliance Specialist

Farmers Mutual Hail Insurance; West Des Moines (IA); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid schedule after training

Parental leave and caregiver leave

Employee appreciation events

Employee Assistance Program (EAP)

On-site cafeteria and fitness center

Job summary

Farmers Mutual Hail Insurance Company (FMH) is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including evidence collection, control testing, and documentation. The role ensures audit readiness and ongoing security assessment.

You will work with security teams on IAM, endpoint security, patch management, logging, and risk-based evaluations; experience with NIST SP 800-171/800-53 is preferred.

Qualifications

• 3–7 years in cybersecurity, IT audit, or compliance.
• Experience with NIST SP 800-171/800-53 preferred.
• Associate degree in related field; Bachelor's preferred.

Responsibilities

• Coordinate annual assessment activities and ongoing compliance readiness.
• Collect evidence, validate controls, and coordinate remediation.
• Perform risk-based assessments of technical and administrative controls.
• Review IAM, endpoint security, patch management, logging, and configuration management.
• Document findings and deficiencies; track remediation actions.
• Evaluate risk and coordinate corrective actions with control owners.
• Maintain audit evidence, workpapers, control documentation and remediation records.
• Support ongoing security audits and monitor recurring findings.
• Recommend improvements to security controls and audit processes.
• Advise stakeholders on security, compliance, documentation and evidence requirements.

Skills

Cybersecurity

IT Audit

Security Compliance

Risk Management

Certifications

Education

Associate degree

Bachelor's degree preferred

Job description

Farmers Mutual Hail Insurance Company (FMH) is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including evidence collection, control testing, and documentation. The role ensures audit readiness and ongoing security assessment.

You will work with security teams on IAM, endpoint security, patch management, logging, and risk-based evaluations; experience with NIST SP 800-171/800-53 is preferred.