SaaS Engineer (GRC)

• Perform security assessments of SaaS and thirdparty vendors.
• Evaluate vendor controls, documentation, and compliance certifications (SOC 2, ISO, GDPR, etc.).
• Analyze shared responsibility models and identify security gaps.
• Review controls across IAM, network security, and data protection.
• Apply InfoSec principles to assess risks and recommend mitigations.

• Strong experience in SaaS assessments, vendor risk management, or cloud security.
• Good understanding of shared responsibility models across cloud providers.
• Knowledge of regulatory and control frameworks (ISO, SOC 2, NIST, GDPR, etc.).
• Handson expertise in IAM, network security, and data protection mechanisms.
• Familiarity with InfoSec principles such as access governance, secure architecture, and risk assessment methodologies.
• Ability to communicate findings to technical and nontechnical stakeholders.
• Certifications (preferred):
• CCSK, CCSP, CISA, CISSP, ISO 27001 LA/LI, or similar.

• Experience working with GRC tools.
• Background in cloud platforms (AWS, Azure, Google Cloud Platform).
• Familiarity with SaaS procurement lifecycle.

Cygnus Professionals is an Equal Opportunity Employer. We encourage professionals from all backgrounds to apply.