Info Security Analyst (SaaS)

• Perform risk assessments against Third-Party SaaS providers, evaluate evidence, interview technical teams and assess control design vs operating effectiveness.
• Provides detailed analysis of user traffic accessing third party sites and services to determine and report on enterprise Risk.
• Monitors and anticipates trends and investigates organizational objectives and needs.
• Creates and maintains operational documentation and reports to support monthly trend analysis as well as project components.
• Evaluate various SaaS technologies and tools for technical, functional, and financial feasibility.
• Partner with and support various technology and business teams to drive and execute results in a timely manner.
• Provide security expertise to the Cloud Program, including Software as a Service (SaaS), and Cloud Application Architecture subprograms.

• 4+ Years

Must Have Technical/Functional Skills

• Knowledge of data classification solutions
• Strong understanding of Multi-tenant SaaS environments
• Cloud shared responsibility model - IaaS / PaaS / SaaS differences
• Containerization (Docker, Kubernetes)
• Identity federation (SAML, OIDC)
• Financial industry standards and regulations such as FedRamp, NIST, CSA, PCI