IT Security Audit Specialist

Farmers Mutual Hail Insurance Company; West Des Moines (IA); Hybrid; USD 85,000 - 115,000; Full time

Benefits offered by this job

Hybrid work schedule after training

Parental leave and caregiver leave

Employee appreciation events

Employee Assistance Program (EAP)

On-site cafeteria and fitness center

Job summary

Farmers Mutual Hail Insurance Company is seeking an IT Security Audit Specialist to support compliance readiness, evidence validation, and control testing across the organization. The role focuses on assessing security controls, documenting findings, and guiding remediation efforts.

The position offers a potential hybrid work schedule after training, plus benefits including parental leave, caregiver leave, EAP, and onsite amenities.

Qualifications

• 3–7 years in cybersecurity, IT audit, security compliance or related field.
• Experience with cybersecurity frameworks and control-based assessments preferred.
• Familiarity with audit evidence collection and documentation.
• Experience supporting internal/external audits encouraged.

Responsibilities

• Coordinates and supports annual assessment activities and ongoing compliance readiness.
• Plans assessments, collects evidence, validates controls, and coordinates stakeholder input.
• Performs risk-based reviews of technical and administrative security controls.
• Reviews IAM, endpoint security, patch management, logging, monitoring, and config mgmt.
• Documents findings, deficiencies, and remediation actions.
• Evaluates risk and coordinates corrective actions with control owners.
• Maintains audit evidence, workpapers, policies and procedures.
• Performs audits outside the annual cycle and tracks recurring findings.
• Provides guidance on security, compliance, and evidence requirements.

Skills

Cybersecurity

IT audit

Security compliance

Risk management

Education

Associate degree

Bachelor’s degree preferred

Tools

NIST SP 800-171

NIST SP 800-53

Job description

At Farmers Mutual Hail (FMH), our mission is simple: protect the livelihoods and legacies of America’s farmers through the complete farm insurance solutions we offer. As America’s Crop Insurance Company™, we’re headquartered in the U.S. and have been owned by the farmers we insure for over 125 years.

FMH is seeking an IT Security Audit Specialist to support the organization’s compliance and annual assessment activities, including audit readiness, evidence validation, control testing, and documentation. This individual will support ongoing security audits and control assessments to identify gaps, validate remediation, and maintain continuous compliance readiness

BENEFITS

Our employees appreciate our family-oriented culture, and we make sure their benefits reflect that. In addition to a competitive salary and bonuses, medical/dental/vision plan, 401(k) plan with a generous company match, you will be eligible for benefits such as:

• Potential for hybrid work schedule after training is completed.
• Paid Parental leave and Caregiver leave.
• Employee appreciation events.
• Employee Assistance Program (EAP) for support when you and your family need it.
• On-site cafeteria and fitness center.

REQUIREMENTS

• Experience:At least 3 to 7 years of experience in cybersecurity, IT audit, security compliance, technology risk, information technology, or a related field. Experience with cybersecurity frameworks, security control assessments, audit evidence collection, technical documentation, or internal/external audit support preferred. Experience working with NIST SP 800-171, NIST SP 800-53, or similar control-based cybersecurity frameworks strongly preferred.
• Education: Associate’s Degree (Bachelor’s Degree preferred) in Cybersecurity, Information Technology, Computer Science, MIS, Information Assurance, Risk Management or a related field.
• Skills: Relevant cybersecurity, audit, or compliance certifications preferred, including: CompTIA Security+, ISACA CISA, ISACA CRISC, ISC2 Certified in Cybersecurity (CC), GIAC GSEC, Other applicable security, audit, risk, or compliance certifications.

KEY RESPONSIBILITIES

• Coordinates and supports annual assessment activities and year-round compliance readiness.
• Conducts assessment planning, evidence collection and validation, control reviews, assessor requests, stakeholder coordination, and identification of control or evidence gaps.
• Performs risk-based assessments of technical and administrative security controls to validate that controls are appropriately designed, implemented, documented, and operating as intended.
• Conducts reviews of identity and access management, endpoint security, vulnerability and patch management, logging and monitoring, and configuration management.
• Documents assessment findings and control deficiencies.
• Evaluates associated risk and coordinate corrective actions with control owners.
• Maintains audit evidence, workpapers, control documentation, findings, remediation records, policies, standards, and procedures.
• Performs ongoing security audits and control reviews outside the annual assessment cycle, monitoring recurring findings and control trends.
• Recommends improvements to security controls and audit processes.
• Provides guidance to technical and business stakeholders regarding security, compliance, documentation, and evidence requirements.

This position is not eligible for sponsorship for work authorization by Farmers Mutual Hail Insurance Company, SI. Therefore, if you will require sponsorship for work authorization now or in the future, we cannot consider your application at this time.

Farmers Mutual Hail Insurance Company does not discriminate in employment (EOE). All qualified applicants are encouraged to apply.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Farmers Mutual Hail Insurance Company’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.