Senior IT Security Engineer

Simpro Software; Miami (FL); On-site; USD 120,000 - 150,000; Full time

Job summary

Simpro Software is seeking a Senior IT Security Engineer to own and advance security, risk management, and compliance across internal systems and environments. You will define governance frameworks, oversee certifications, and drive risk remediation with a high degree of autonomy.

You will lead identity management, access controls, vulnerability governance, and vendor risk while advising cross-functional teams on secure configurations and incident readiness.

Qualifications

• Experience designing and managing enterprise security programs.
• Experience with IAM, network security, cloud security.
• Experience in vendor risk and data access security.
• Incident response coordination and tabletop exercises.
• Excellent communication with non-technical partners.

Responsibilities

• Owns enterprise security and compliance program across infrastructure and systems.
• Maintains organizational risk register and prioritizes remediation strategies.
• Defines identity architecture standards and access controls to minimize exposure.
• Drives vulnerability governance with SLAs and incident metrics.
• Leads third-party risk assessments before onboarding.
• Oversees security questionnaire workflows and reporting for external stakeholders.
• Shapes incident response playbooks and conducts tabletop simulations.
• Advises on secure configuration, secrets management, and policy execution.
• Evaluates security platforms and governance technologies to improve resilience.
• Balances security risk with business needs to recommend practical controls.

Skills

Enterprise security program

IAM & access management

Vulnerability management

Risk assessment & governance

Incident response & tabletop exercises

Stakeholder communication

Security standards & audit readiness

Education

Relevant degree in Computer Science / IT / Cybersecurity

Job description

Job Context

The Senior IT Security Engineer is a senior individual contributor role responsible for owning and advancing the security, risk management, and compliance posture across internal systems and operational environments. This position defines security governance frameworks, oversees certification maintenance, and manages technical risk remediation across enterprise infrastructure. Operating with significant autonomy, the incumbent serves as an authoritative advisor on identity management, access controls, vulnerability governance, and vendor risk. Through technical authority and cross-functional influence, this role ensures internal operations maintain continuous alignment with industry security standards and organizational resilience objectives.

What You’ll Do

• Owns the enterprise security and compliance program, driving continuous alignment with industry-standard security frameworks, certifications, and audit disciplines.
• Establishes and maintains the organizational risk register across physical, logical, and systems infrastructure to prioritize risk mitigation and remediation strategies.
• Defines and enforces identity architecture standards, access management controls, and credentials governance to minimize operational exposure.
• Drives vulnerability management governance across technical environments by establishing severity SLAs, standardizing inspection metrics, and overseeing remediation adherence.
• Leads third-party risk management initiatives by conducting security assessments of software vendors, integrations, and external technologies prior to onboarding.
• Oversees security questionnaire workflows and compliance reporting to deliver streamlined assurance for external stakeholders.
• Shapes incident response playbooks, conducts regular tabletop simulations, and acts as a primary technical advisor during security events and resilience reviews.
• Advises technical and operational teams on secure configuration, access modeling, secrets management, and policy execution.
• Evaluates emerging security platforms, governance technologies, and operational controls to continuously elevate enterprise resilience and audit readiness.
• Balances security risk considerations against business velocity to recommend practical controls and defensible risk-acceptance thresholds.

This job description is not an exhaustive list of duties and may be modified at the discretion of Simpro Group

What You’ll Bring

• Demonstrated experience designing, implementing, and managing enterprise security programs, risk registers, and compliance audit lifecycles.
• Technical expertise in identity and access management (IAM), network security controls, cloud infrastructure security, and vulnerability management governance.
• Proven ability to evaluate third-party vendor risk and govern data access security across complex software environments.
• Practical experience in incident response coordination, playbook development, and conducting technical tabletop exercises.
• Exceptional communication and stakeholder management skills, with the ability to articulate technical risk and security trade-offs to non-technical partners.
• Demonstrated track record of setting technical direction, establishing standards, and influencing cross-functional technical teams without direct formal authority.
• Strong analytical, problem-solving, and decision-making capabilities focused on practical risk reduction and operational enablement.
• Relevant degree in Computer Science, Information Technology, Cybersecurity, or an equivalent combination of senior professional experience and industry certifications.

Our Core Values

We Are One Team

We Are Customer Centric

We Are Growth Minded

We Are Accountable

We Celebrate Success

Simpro, AroFlo, BigChange & ClockShark are equal opportunity employers with a best-of-class onboarding program and supportive team environments. This means that we want everyone to feel welcome with us and to provide equal opportunities for everyone, regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex or sexual orientation, or any other non-performance factor.