SaaS Engineer ( GRC Analyst with IAM )

Job Description

Title: SaaS Engineer ( GRC Analyst with IAM )

Location: Phoenix AZ onsite only

Duration: Contract

Key Responsibilities

• Perform security assessments of SaaS and third‑party vendors.
• Evaluate vendor controls, documentation, and compliance certifications (SOC 2, ISO, GDPR, etc.).
• Analyze shared responsibility models and identify security gaps.
• Review controls across IAM, network security, and data protection.
• Apply InfoSec principles to assess risks and recommend mitigations.

Required Skills & Qualifications

• Strong experience in SaaS assessments, vendor risk management, or cloud security.
• Good understanding of shared responsibility models across cloud providers.
• Knowledge of regulatory and control frameworks (ISO, SOC 2, NIST, GDPR, etc.).
• Hands‑on expertise in IAM, network security, and data protection mechanisms.
• Familiarity with InfoSec principles such as access governance, secure architecture, and risk assessment methodologies.
• Ability to communicate findings to technical and non‑technical stakeholders.
• Certifications (preferred):
• CCSK, CCSP, CISA, CISSP, ISO 27001 LA/LI, or similar.

Nice‑to‑Have

• Experience working with GRC tools.
• Background in cloud platforms (AWS, Azure, Google Cloud Platform).

Familiarity with SaaS procurement lifecycle