Information Security Analyst (SaaS Security)
Share
Job Location:
Phoenix, NM - USA
Monthly Salary:
Not Disclosed
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
Role: Information Security Analyst (SaaS Security)
Location: Phoenix AZ
Experience: 6 Years
Job Summary
We are seeking a skilled Information Security Analyst with strong experience in SaaS security cloud risk assessment and compliance frameworks. The ideal candidate will evaluate security controls of third-party SaaS platforms assess risks in multi-tenant environments and ensure alignment with enterprise security standards and regulatory frameworks.
Key Responsibilities
-
Perform security and risk assessments for third-party SaaS providers.
-
Evaluate security evidence and conduct technical interviews with vendor engineering teams.
-
Assess control design and operating effectiveness against regulatory and organizational standards.
-
Analyze user traffic accessing third-party applications and SaaS services to identify enterprise risks.
-
Monitor security trends and evaluate new technologies supporting organizational security objectives.
-
Develop and maintain security documentation reports and operational procedures.
-
Support monthly security trend analysis and reporting initiatives.
-
Evaluate SaaS technologies and tools for technical feasibility and security compliance.
-
Provide security expertise for cloud and SaaS architecture programs.
-
Collaborate with business and technology teams to implement secure cloud and SaaS initiatives.
Required Skills
-
Strong knowledge of data classification solutions and data protection controls.
-
Experience working with multi-tenant SaaS environments.
-
Solid understanding of cloud shared responsibility models across IaaS PaaS and SaaS.
-
Hands-on exposure to containerization technologies such as Docker and Kubernetes.
-
Experience with identity federation technologies including SAML and OIDC.
-
Familiarity with cloud and SaaS security architectures.
-
Strong analytical and risk assessment skills.
Compliance & Security Frameworks
Experience with financial industry and cloud security standards including:
-
FedRAMP
-
NIST
-
Cloud Security Alliance (CSA)
-
PCI DSS
Preferred Qualifications
-
Experience in financial services or regulated industries.
-
Understanding of third-party risk management and vendor security reviews.
-
Knowledge of cloud security monitoring and SaaS governance frameworks.
Key Skill Areas
-
SaaS Security
-
Cloud Security
-
Vendor Risk Assessment
-
Identity Federation (SAML OIDC)
-
Docker / Kubernetes
-
Data Classification
-
Compliance (FedRAMP NIST CSA PCI)
