IT Security Controls Spec I

Join an amazing team that is consistently recognized for our achievements and culture, including our most recent Forbes award of being one of America's Best Midsize Employers for 2026!

Position Summary

This position provides an excellent opportunity to contribute to the Company’s annual Sarbanes-Oxley (SOX) and Model Audit Rule (MAR) compliance efforts, while gaining expertise in the testing of IT general control design and effectiveness and remediation of control deficiencies. This position is also supports the maintenance of SOX control narrative documentation and control waivers.

An in-person interview may be required during the hiring process

State specific pay scales for this role are as follows:

$56,701 to $102,219 (CA, NJ, NY, WA, HI, AK, MD, CT, RI, MA)

$51,546 to $92,927 (NV, OR, AZ, CO, WY, TX, ND, MN, MO, IL, WI, FL, GA, MI, OH, VA, PA, DE, VT, NH, ME)

$46,392 to $83,634 (UT, ID, MT, NM, SD, NE, KS, OK, IA, AR, LA, MS, AL, TN, KY, IN, SC, NC, WV)

The expected base salary for this position will vary depending on a number of factors, including relevant experience, skills and location.

Essential Job Functions

• Participates in the scoping and planning of annual compliance efforts
• Assess the existence and operating effectiveness of all in-scope controls
• Bring any control deficiency gaps to the attention of senior IT security personnel
• Tests any controls that have been added or remediated
• Produces testing result documentation
• Manage the daily/weekly/monthly/quarterly access control processes
• Participate in the Vendor Risk Assessment process, complete the initial/annual assessments, follow up with the vendor contacts in obtaining SOC reports, obtain clarifications for pending items.
• Other functions that may be assigned

Education

Minimum:

• Bachelor’s Degree in Computer Science, Information Systems or other related fields OR equivalent combination of education and experience

Preferred:

• CISA and/or CISSP certification.

Experience

Minimum:

• 1 year of Sarbanes-Oxley control experience or equivalent.

Skills

• Knowledge of auditing practices.
• Knowledge of control design.
• General knowledge of COBIT and other control frameworks.
• Refer to “IT Responsibility Matrix” for more detailed competencies for this job. 

Why choose a career at Mercury?

At Mercury, we have been guided by our purpose to help people reduce risk and overcome unexpected events for more than 60 years. We are one team with a common goal to help others. Everyone needs insurance and we can’t imagine a world without it.

Our team will encourage you to grow, make time to have fun, and work together to make great things happen. We embrace the strengths and values of each team member. We believe in having diverse perspectives where everyone is included, to serve customers from all walks of life.

We care about our people, and we mean it. We reward our talented professionals with a competitive salary, bonus potential, and a variety of benefits to help our team members reach their health, retirement, and professional goals.

Learn more about us here: https://www.mercuryinsurance.com/about/careers

We offer many great benefits, including:

• Competitive compensation
• Flexibility to work from anywhere in the United States for most positions
• Paid time off (vacation time, sick time, 9 paid Company holidays, volunteer hours)
• Incentive bonus programs (potential for holiday bonus, referral bonus, and performance-based bonus)
• Medical, dental, vision, life, and pet insurance
• 401 (k) retirement savings plan with company match
• Engaging work environment
• Promotional opportunities
• Education assistance
• Professional and personal development opportunities
• Company recognition program
• Health and wellbeing resources, including free mental wellbeing therapy/coaching sessions, child and eldercare resources, and more

Mercury Insurance is an equal opportunity employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by federal, state, or local law.