IT Security Audit Specialist

Farmers Mutual Hail Insurance; West Des Moines (IA); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Hybrid schedule after training

Parental leave and caregiver leave

Employee appreciation events

Employee Assistance Program (EAP)

On-site cafeteria and fitness center

Job summary

Farmers Mutual Hail Insurance Company (FMH) is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including evidence collection, control testing, and documentation. The role ensures audit readiness and ongoing security assessment.

You will work with security teams on IAM, endpoint security, patch management, logging, and risk-based evaluations; experience with NIST SP 800-171/800-53 is preferred.

Qualifications

• 3–7 years in cybersecurity, IT audit, or compliance.
• Experience with NIST SP 800-171/800-53 preferred.
• Associate degree in related field; Bachelor's preferred.

Responsibilities

• Coordinate annual assessment activities and ongoing compliance readiness.
• Collect evidence, validate controls, and coordinate remediation.
• Perform risk-based assessments of technical and administrative controls.
• Review IAM, endpoint security, patch management, logging, and configuration management.
• Document findings and deficiencies; track remediation actions.
• Evaluate risk and coordinate corrective actions with control owners.
• Maintain audit evidence, workpapers, control documentation and remediation records.
• Support ongoing security audits and monitor recurring findings.
• Recommend improvements to security controls and audit processes.
• Advise stakeholders on security, compliance, documentation and evidence requirements.

Skills

Cybersecurity

IT Audit

Security Compliance

Risk Management

Certifications

Education

Associate degree

Bachelor's degree preferred

Job description

At Farmers Mutual Hail (FMH), our mission is simple: protect the livelihoods and legacies of America’s farmers through the complete farm insurance solutions we offer. As America’s Crop Insurance Company™, we’re headquartered in the U.S. and have been owned by the farmers we insure for over 125 years.

FMH is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including audit readiness, evidence validation, control testing, and documentation. This individual will support ongoing security audits and control assessments to identify gaps, validate remediation, and maintain continuous compliance readiness.

Benefits

• Potential for hybrid work schedule after training is completed.
• Paid Parental leave and Caregiver leave.
• Employee appreciation events.
• Employee Assistance Program (EAP) for support when you and your family need it.
• On-site cafeteria and fitness center.

Requirements

• Experience: At least 3 to 7 years of experience in cybersecurity, IT audit, security compliance, technology risk, information technology, or a related field. Experience with cybersecurity frameworks, security control assessments, audit evidence collection, technical documentation, or internal/external audit support preferred. Experience working with NIST SP 800-171, NIST SP 800-53, or similar control-based cybersecurity frameworks strongly preferred.
• Education: Associate’s Degree (Bachelor’s Degree preferred) in Cybersecurity, Information Technology, Computer Science, MIS, Information Assurance, Risk Management or a related field.
• Skills: Relevant cybersecurity, audit, or compliance certifications preferred, including: CompTIA Security+, ISACA CISA, ISACA CRISC, ISC2 Certified in Cybersecurity (CC), GIAC GSEC, Other applicable security, audit, risk, or compliance certifications.

Key Responsibilities

• Coordinates and supports annual assessment activities and year-round compliance readiness.
• Conducts assessment planning, evidence collection and validation, control reviews, assessor requests, stakeholder coordination, and identification of control or evidence gaps.
• Performs risk-based assessments of technical and administrative security controls to validate that controls are appropriately designed, implemented, documented, and operating as intended.
• Conducts reviews of identity and access management, endpoint security, vulnerability and patch management, logging and monitoring, and configuration management.
• Documents assessment findings and control deficiencies.
• Evaluates associated risk and coordinate corrective actions with control owners.
• Maintains audit evidence, workpapers, control documentation, findings, remediation records, policies, standards, and procedures.
• Performs ongoing security audits and control reviews outside the annual assessment cycle, monitoring recurring findings and control trends.
• Recommends improvements to security controls and audit processes.
• Provides guidance to technical and business stakeholders regarding security, compliance, documentation, and evidence requirements.

This position is not eligible for sponsorship for work authorization by Farmers Mutual Hail Insurance Company, SI. Therefore, if you will require sponsorship for work authorization now or in the future, we cannot consider your application at this time.

Farmers Mutual Hail Insurance Company does not discriminate in employment (EOE). All qualified applicants are encouraged to apply.