Provided are a system and method for providing an Internet of Things (IoT) security service using a hardware security module. The system includes a host device configured to transmit a security service request by calling a security service application programming interface (API) and a security module configured to convert the security service request into a security execution request and execute the security execution request by calling a security API. According to the call of the security API, the security module converts the security execution request into a request to execute a security algorithm executable by at least one of a security element and a security storage.