Lead Enterprise Security and IAM Risk Engineer

Simpro Group; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Simpro Group is seeking a Senior IT Security Engineer to own and advance security, risk management, and compliance across internal systems. This senior individual contributor role operates with autonomy and provides technical guidance on identity management, access controls, and resilience.

You will lead the security program, maintain risk registers, enforce governance and audit disciplines, oversee vendor risk, incident response playbooks, and drive remediation.

Qualifications

• Experience designing, implementing, and managing enterprise security programs and risk registers.
• Expertise in IAM, network and cloud security, and vulnerability management governance.
• Ability to evaluate third‑party vendor risk and govern data access security across complex environments.
• Incident response coordination, playbook development, and tabletop exercise experience.

Responsibilities

• Owns the enterprise security and compliance program, aligning with frameworks, certifications, and audit disciplines.
• Maintains organizational risk register across physical, logical, and systems infrastructure to guide remediation.
• Defines identity architecture standards and access controls to minimize exposure.
• Drives vulnerability governance with SLAs, metrics, and remediation oversight.
• Leads third‑party risk assessments before onboarding vendors and external tech.
• Oversees security questionnaire workflows and compliance reporting for external stakeholders.
• Shapes incident response playbooks and conducts tabletop simulations.

Skills

IAM

Network security

Cloud security

Vulnerability governance

Incident response

Playbook development

Tabletop exercises

Stakeholder management

Technical leadership

Risk assessment

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity or equivalent

Job description

Simpro Group is seeking a Senior IT Security Engineer to own and advance security, risk management, and compliance across internal systems. This senior individual contributor role operates with autonomy and provides technical guidance on identity management, access controls, and resilience.

You will lead the security program, maintain risk registers, enforce governance and audit disciplines, oversee vendor risk, incident response playbooks, and drive remediation.