IT GRC Analyst (PCI INTERNAL SECURITY ASSESSOR)-HYBRID

We are seeking an experienced IT GRC Analyst (PCI Internal Security Assessor) to work on a team of 12 Payment Card Industry Internal Security Assessors (PCI ISA). This role is responsible for assessing, validating, and delivering the Payment Card Industry Data Security Standard (PCI DSS) compliance of people, processes, and technologies for the Cardholder Data Environment at State Farm.

Some Responsibilities May Include:

• Apply established PCI DSS scoping criteria.
• Collect and review evidence to validate compliance with PCI DSS requirements.
• Support the preparation of the annual PCI DSS Report on Compliance (ROC).
• Drive IT system and process updates aligned with PCI DSS scope and requirements.
• Facilitate collaboration among business partners, product teams, and the PCI Compliance & Consulting team.
• Advise on moderately complex PCI DSS compliance matters.
• Build strong working relationships with business, information security, and technology product teams.
• Stay current on evolving security, technology, governance, risk, and compliance topics through formal training and independent learning.
• Share knowledge and experience through ongoing team training and mentoring.
• Obtain the PCI Security Standards Council (PCI SSC) sponsored PCI Internal Security Assessor (PCI ISA) certification within six months of effective start date in the role., + Infrastructure, including AWS and Azure cloud environments
• Network segmentation
• Artificial intelligence
• Tokenization
• Secure system development
• Software development lifecycle
• Modern authentication protocols, such as OIDC, FIDO2, OAuth 2.0, and SAML 2.0
• Penetration testing
• Reviewing and managing internal and external scan results
• Logging
• Information security policy
• Strong analytical, collaboration, and communication skills, with the ability to present solutions verbally and in writing and help business partners and stakeholders remediate compliance issues.
• Intermediate knowledge of PCI DSS and security frameworks, including the requirements for protecting customers’ payment card data.
• Ability to identify and resolve complex issues involving customer channels, use cases, cardholder data, and applicable PCI DSS requirements.

Information Technology & Information Systems, PCI, Analysis Skills, Customer Experience, ISA Standards, Information Technology & Information Systems, Analysis Skills, PCI, PCI-DSS, Systems Maintenance, We Are Seeking Candidates With:

• Five years of experience in IT and/or information security, preferably with a background in IT risk and compliance and information security best practices.
• Experience supporting or participating in assessments or audits involving IT governance, regulatory, or compliance requirements.
• Experience using or building workflows in ServiceNow.
• Experience using artificial intelligence tools.
• Intermediate experience in at least three of the following areas, * Current or previous certification in one or more of the following: Security+, CISSP, GSEC, AWS Cloud Practitioner, AWS Solutions Architect - Associate, a Microsoft Azure certification, CISA, CISM, CRISC, PCI ISA, QSA, or PCIP.
• Demonstrated ability to work independently and deliver results in a fast-paced, complex, and changing environment.
• Strong communication skills and experience contributing both independently and as part of a team across multiple business functions.

Because work-life balance is a priority at State Farm, compensation is based on our standard 38:45-hour work week!

• Potential starting salary range: $97,000 - $125,000 *

• Starting salary will be based on skills, background, and experience
• High end of the range limited to applicants with significant relevant experience
• Potential yearly incentive pay up to 15% of base salary

At State Farm, we offer more than just a paycheck. Check out our suite of benefits designed to give you the flexibility you need to take care of you and your family!

• Get Paid! On top of our competitive pay, you are eligible for an annual raise and bonus.
• Stay Well! Focus on you and your family’s health with our robust health and wellbeing programs. State Farm pays most of your healthcare premium, and we offer multiple healthcare plan options, including a high deductible plan. All medical plans provide 100% coverage for in-network preventative care, AND you and your family have access to vision, dental, telemedicine, 24/7 mental health professionals, and much more!
• Develop and Grow! Take advantage of educational benefits like industry leading training programs, top-notch tuition assistance programs, employee resource groups, and mentoring.
• Plan Ahead! Plan for those big moments in life with benefits like fertility/IVF/adoption assistance, college coaching, national discount programs, interactive monthly financial workshops, free financial coaching, and more. You can also start a savings account or consider financing through our State Farm Federal Credit Union!
• Take a Little “You” Time! You will have access to our generous time off policies designed so you can plan around holidays, family events, volunteering, or just to take a relaxing day off. With the opportunity to initially earn up to 20 days annually plus parental leave, paid holidays, celebration day, life leave (40 hours/year), bereavement leave, and community service/education support days, there will be plenty of time for you!
• Give Back! We offer several ways to give back through our Matching Gift Program, Good Neighbor Grant Program, and the Employee Assistance Fund.
• Finish Strong! Plan for retirement using free financial advisors and a 401(k) plan with company contributions of up to 7% of your salary.

Being good neighbors - helping people, investing in our communities, and making the world a better place - is who we are at State Farm. It is at the core of how we operate and the reason for our success. We’re moving with urgency to become a Next Gen Good Neighbor, with technology that strengthens human connections and enhances the customer experience. As an employee, you’ll spend less time navigating systems and more time applying judgment, empathy, and expertise in the moments that matter most.

Hybrid Work Arrangement: A “Hybrid” position means selected candidates will be assigned to a facility and will spend some time working both in the office and from home. For Enterprise Technology, a hybrid work arrangement will require approximately 40% in-office time each month, beginning in late 2027.