Information Security Analyst (SaaS Security)

Role: Information Security Analyst (SaaS Security)

Location: Phoenix, AZ

Experience: 6+ Years

Job Summary

We are seeking a skilled Information Security Analyst with strong experience in SaaS security, cloud risk assessment, and compliance frameworks. The ideal candidate will evaluate security controls of third-party SaaS platforms, assess risks in multi-tenant environments, and ensure alignment with enterprise security standards and regulatory frameworks.

Key Responsibilities

• Perform security and risk assessments for third-party SaaS providers.
• Evaluate security evidence and conduct technical interviews with vendor engineering teams.
• Assess control design and operating effectiveness against regulatory and organizational standards.
• Analyze user traffic accessing third-party applications and SaaS services to identify enterprise risks.
• Monitor security trends and evaluate new technologies supporting organizational security objectives.
• Develop and maintain security documentation, reports, and operational procedures.
• Support monthly security trend analysis and reporting initiatives.
• Evaluate SaaS technologies and tools for technical feasibility and security compliance.
• Provide security expertise for cloud and SaaS architecture programs.
• Collaborate with business and technology teams to implement secure cloud and SaaS initiatives.

Required Skills

• Strong knowledge of data classification solutions and data protection controls.
• Experience working with multi-tenant SaaS environments.
• Solid understanding of cloud shared responsibility models across IaaS, PaaS, and SaaS.
• Hands-on exposure to containerization technologies such as Docker and Kubernetes.
• Experience with identity federation technologies including SAML and OIDC.
• Familiarity with cloud and SaaS security architectures.
• Strong analytical and risk assessment skills.

Compliance & Security Frameworks

Experience with financial industry and cloud security standards including:

• FedRAMP
• NIST
• Cloud Security Alliance (CSA)
• PCI DSS

Preferred Qualifications

• Experience in financial services or regulated industries.
• Understanding of third-party risk management and vendor security reviews.
• Knowledge of cloud security monitoring and SaaS governance frameworks.

Key Skill Areas

• SaaS Security
• Cloud Security
• Vendor Risk Assessment
• Identity Federation (SAML, OIDC)
• Docker / Kubernetes
• Data Classification
• Compliance (FedRAMP, NIST, CSA, PCI)