
IT Security Controls Specialist I
Mercury Insurance
full-time
Posted on:
Location Type: Remote
Location: California • United States
Visit company websiteExplore more
Salary
💰 $56,701 - $102,219 per year
Job Level
About the role
- Participates in the scoping and planning of annual compliance efforts
- Assess the existence and operating effectiveness of all in-scope controls
- Bring any control deficiency gaps to the attention of senior IT security personnel
- Tests any controls that have been added or remediated
- Produces testing result documentation
- Manage the daily/weekly/monthly/quarterly access control processes
- Participate in the Vendor Risk Assessment process, complete the initial/annual assessments, follow up with the vendor contacts in obtaining SOC reports, obtain clarifications for pending items.
Requirements
- Minimum: Bachelor’s Degree in Computer Science, Information Systems or other related fields OR equivalent combination of education and experience
- Preferred: CISA and/or CISSP certification.
- Minimum: 1 year of Sarbanes-Oxley control experience or equivalent.
- Knowledge of auditing practices.
- Knowledge of control design.
- General knowledge of COBIT and other control frameworks.
Benefits
- Competitive compensation
- Flexibility to work from anywhere in the United States for most positions
- Paid time off (vacation time, sick time, 9 paid Company holidays, volunteer hours)
- Incentive bonus programs (potential for holiday bonus, referral bonus, and performance-based bonus)
- Medical, dental, vision, life, and pet insurance
- 401 (k) retirement savings plan with company match
- Engaging work environment
- Promotional opportunities
- Education assistance
- Professional and personal development opportunities
- Company recognition program
- Health and wellbeing resources, including free mental wellbeing therapy/coaching sessions, child and eldercare resources, and more
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
compliancecontrol testingcontrol designauditing practicesSOC reportsvendor risk assessmentSarbanes-OxleyCOBIT
Soft Skills
attention to detailcommunicationorganizational skills
Certifications
CISACISSP