Cybersecurity Analyst, SaaS

Position Purpose

This Cybersecurity Analyst, SaaS role is the key operational driver of risk reduction for the SaaS Security program. The analyst will be responsible for analyzing the findings from our SaaS Security tools, collaborating directly with SaaS application owners to drive the remediation of identified risks, and reporting on the overall security posture of our SaaS environment. This position acts as the crucial link between security data and tangible security improvements.

Key Responsibilities

• Analysis (30%): Perform data gathering, synthesis, and develop solutions, leveraging department standards to achieve results.
• Collaborate (30%): Partner with teams to identify trends and resolve problems effectively.
• Drive Execution (40%): Evaluate information and provide actionable recommendations based on findings to enhance security.

Direct Manager/Direct Reports

This Position typically reports to Manager or Sr. Manager. This Position has 0 Direct Reports.

Travel Requirements

Typically requires overnight travel less than 10% of the time.

Physical Requirements

Most of the time is spent sitting in a comfortable position, with frequent opportunity to move about. On rare occasions, there may be a need to move or lift light articles.

Working Conditions

Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.

Minimum Qualifications

• Must be eighteen years of age or older.
• Must be legally permitted to work in the United States.
• 2+ years of experience in an Information Security, IT audit, or risk management role.
• Excellent analytical, problem-solving, and communication skills.
• Ability to translate complex technical risks into clear, business-oriented language.
• Strong organizational skills and the ability to manage multiple stakeholder engagements simultaneously.

Preferred Qualifications

• Bachelor's degree in a relevant field.
• Experience working directly with business stakeholders to remediate security findings.
• Familiarity with security frameworks (NIST, ISO 27001) and IT general controls.
• Experience with ticketing systems (e.g., Jira, ServiceNow) for tracking remediation.
• Security certifications such as CompTIA Security+, CISM, or CRISC.

Minimum Education & Experience

The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job. Minimum 0 years of work experience, though 2+ years in security/IT audit/risk is explicitly required in Minimum Qualifications.

Competencies

• Action Oriented
• Collaborates
• Communicates Effectively
• Customer Focus
• Drives Results

Key skills/competency

• SaaS Security
• Risk Reduction
• Security Analysis
• Stakeholder Collaboration
• Information Security
• IT Audit
• Risk Management
• Security Frameworks (NIST, ISO 27001)
• Remediation Planning
• Problem-Solving