Information Security Analyst (SaaS Security)

Role: Information Security Analyst (SaaS Security)
Location: Phoenix, AZ
Experience: 6+ Years

Job Summary

We are seeking a skilled Information Security Analyst with strong experience in SaaS security, cloud risk assessment, and compliance frameworks . The ideal candidate will evaluate security controls of third-party SaaS platforms, assess risks in multi-tenant environments, and ensure alignment with enterprise security standards and regulatory frameworks.

Key Responsibilities

• Perform security and risk assessments for third-party SaaS providers .

• Evaluate security evidence and conduct technical interviews with vendor engineering teams .

• Assess control design and operating effectiveness against regulatory and organizational standards.

• Analyze user traffic accessing third-party applications and SaaS services to identify enterprise risks.

• Monitor security trends and evaluate new technologies supporting organizational security objectives.

• Develop and maintain security documentation, reports, and operational procedures .

• Support monthly security trend analysis and reporting initiatives .

• Evaluate SaaS technologies and tools for technical feasibility and security compliance .

• Provide security expertise for cloud and SaaS architecture programs .

• Collaborate with business and technology teams to implement secure cloud and SaaS initiatives .

Required Skills

• Strong knowledge of data classification solutions and data protection controls .

• Experience working with multi-tenant SaaS environments .

• Solid understanding of cloud shared responsibility models across IaaS, PaaS, and SaaS .

• Hands-on exposure to containerization technologies such as Docker and Kubernetes .

• Experience with identity federation technologies including SAML and OIDC .

• Familiarity with cloud and SaaS security architectures .

• Strong analytical and risk assessment skills.

Compliance & Security Frameworks

Experience with financial industry and cloud security standards including:

• FedRAMP

• NIST

• Cloud Security Alliance (CSA)

• PCI DSS

Preferred Qualifications

• Experience in financial services or regulated industries .

• Understanding of third-party risk management and vendor security reviews .

• Knowledge of cloud security monitoring and SaaS governance frameworks .

Key Skill Areas

• SaaS Security

• Cloud Security

• Vendor Risk Assessment

• Identity Federation (SAML, OIDC)

• Docker / Kubernetes

• Data Classification

• Compliance (FedRAMP, NIST, CSA, PCI)