Identity and GRC Security Engineer

General Purpose:  

We are seeking a Security Engineer to join our growing Information Technology team.  In this role, you will collaborate with technology teams, business leaders, consultants, and colleagues in Troon to ensure the successful implementation and operation of secure technology. Working in our corporate headquarters in Scottsdale, AZ, you will play a pivotal role in technology risk reduction through operating security tools, defining process, and maintaining compliance with our security program. This role is expected to be in office 3+ days a week. 

 Salary range: $115,000 - $125,000 annually

Essential Duties: 

• Partner with technology and business teams to achieve and sustain compliance with internal and regulatory security requirements. 

• Supports Identity and Access Management in a primarily Azure-first stack, including Entra, MFA, Conditional Access, PIM, RBAC. 

• Owns security control functions including design, implementation, and monitoring of security controls and policy as code. 

• Enhance existing SIEM functionality with governance engineering for change control, access revocation, and security monitoring. 

• Continually improves security through adoption of new tooling, features, processes, and technology consolidations. 

• Build incident response procedures, including analyzing, detection, containment, documentation, remediation, and improvement plans on an Azure-first tech stack. 

• Other security engineering, governance, risk, compliance, or technology related duties as required. 

Education/Experience:  

• Bachelor’s degree in computer science, Information Technology or Business Management preferred but not required. 

• Minimum three years of experience in enterprise information technology with a focus on engineering and security. 

Certificates/Licenses: 

The following certifications are highly preferred. 

• CRISC, CISSP, CISM or similar security or risk certifications. 

• Microsoft AZ-104, AZ-305, SC-200, SC-300, SC-500, AZ-500 

Job Knowledge, Skill, and Ability Preferences  

• Strong with Microsoft Azure offerings. 

• Strong with Microsoft desktop and server operating systems. 

• Strong with security best practices from NIST, CIS, and PCI. 

• Strong with practical application of security in an enterprise. 

• Analytical and holistic thinking. 

• Ethically and morally sound decision-making abilities. 

• Demonstratable problem-solving skills. 

This job description is not an exclusive or exhaustive list of all job functions that an associate in this position may be asked to perform from time to time.