Information Security Analyst – SaaS

Veriipro; Phoenix (AZ); On-site; USD 90,000 - 120,000; Full time

Job summary

Veriipro is seeking a professional in Phoenix, Arizona to conduct comprehensive risk assessments of third-party SaaS providers and analyze user interactions with these platforms. The ideal candidate will have strong knowledge in data protection solutions and a deep understanding of SaaS security risks.

The responsibilities include developing operational documentation and collaborating with cross-functional teams to enhance security initiatives. Relevant certifications like CISSP or CCSP are preferred.

Qualifications

• Strong knowledge of data classification and data protection solutions.
• Deep understanding of multi-tenant SaaS environments and associated security risks.
• Solid grasp of cloud shared responsibility models across IaaS, PaaS, and SaaS.

Responsibilities

• Conduct comprehensive risk assessments of third-party SaaS providers.
• Analyze user traffic and interactions with external SaaS platforms to identify security risks.
• Develop and maintain operational documentation and reports for risk trending.

Skills

Data classification and protection

Multi-tenant SaaS environments

Cloud shared responsibility models

Containerization technologies

Identity and access management

Regulatory frameworks knowledge

Education

Relevant certifications (e.g., CISSP, CCSP, CISM)

Tools

SaaS security posture management tools

CASB or SASE solutions

Job description

Roles & Responsibilities

• Conduct comprehensive risk assessments of third-party SaaS providers, including evaluating security documentation, reviewing evidence, interviewing technical stakeholders, and assessing both control design and operating effectiveness
• Analyze user traffic and interactions with external SaaS platforms to identify, assess, and report enterprise security risks
• Monitor emerging security trends and proactively align insights with organizational objectives and evolving business needs
• Develop, maintain, and enhance operational documentation, dashboards, and reports to support monthly risk trending and project deliverables
• Evaluate SaaS technologies and tools for technical, functional, and financial viability, providing actionable recommendations
• Collaborate with cross-functional technology and business teams to drive timely execution of security initiatives and risk mitigation efforts
• Provide subject matter expertise to Cloud Security programs, including SaaS platforms and cloud application architecture initiatives

Required Technical Skills

• Strong knowledge of data classification and data protection solutions
• Deep understanding of multi-tenant SaaS environments and associated security risks
• Solid grasp of cloud shared responsibility models across IaaS, PaaS, and SaaS
• Experience with containerization technologies such as Docker and Kubernetes
• Proficiency in identity and access management concepts, including federation protocols (SAML, OIDC)
• Familiarity with financial industry standards and regulatory frameworks such as FedRAMP, NIST, CSA, and PCI DSS

Preferred Experience

• Experience with SaaS security posture management (SSPM) tools
• Knowledge of CASB or SASE solutions
• Familiarity with vendor risk management frameworks
• Relevant certifications (e.g., CISSP, CCSP, CISM)