Information Security Analyst (SaaS Security)

Role: Information Security Analyst (SaaS Security)

Location: Phoenix, AZ

Experience: 6+ Years

Job Summary

We are seeking a skilled Information Security Analyst with strong experience in SaaS security, cloud risk assessment, and compliance frameworks. The ideal candidate will evaluate security controls of third-party SaaS platforms, assess risks in multi-tenant environments, and ensure alignment with enterprise security standards and regulatory frameworks.

Key Responsibilities

• Perform security and risk assessments for third-party SaaS providers.

• Evaluate security evidence and conduct technical interviews with vendor engineering teams.

• Assess control design and operating effectiveness against regulatory and organizational standards.

• Analyze user traffic accessing third-party applications and SaaS services to identify enterprise risks.

• Monitor security trends and evaluate new technologies supporting organizational security objectives.

• Develop and maintain security documentation, reports, and operational procedures.

• Support monthly security trend analysis and reporting initiatives.

• Evaluate SaaS technologies and tools for technical feasibility and security compliance.

• Provide security expertise for cloud and SaaS architecture programs.

• Collaborate with business and technology teams to implement secure cloud and SaaS initiatives.

Required Skills

• Strong knowledge of data classification solutions and data protection controls.

• Experience working with multi-tenant SaaS environments.

• Solid understanding of cloud shared responsibility models across IaaS, PaaS, and SaaS.

• Hands-on exposure to containerization technologies such as Docker and Kubernetes.

• Experience with identity federation technologies including SAML and OIDC.

• Familiarity with cloud and SaaS security architectures.

• Strong analytical and risk assessment skills.

Compliance & Security Frameworks

Experience with financial industry and cloud security standards including:

• FedRAMP

• NIST

• Cloud Security Alliance (CSA)

• PCI DSS

Preferred Qualifications

• Experience in financial services or regulated industries.

• Understanding of third-party risk management and vendor security reviews.

• Knowledge of cloud security monitoring and SaaS governance frameworks.

Key Skill Areas

• SaaS Security

• Cloud Security

• Vendor Risk Assessment

• Identity Federation (SAML, OIDC)

• Docker / Kubernetes

• Data Classification

• Compliance (FedRAMP, NIST, CSA, PCI)