Lead Information Security Consultant – SaaS Security Configuration

U.S. Bank

. Lead the proactive management and enhancement of SaaS security configuration practices at U.S.

Posted 10/27/2026full-timeUnited StatesSenior💰 $133,365 - $156,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SaaS security configuration management, including risk assessment, monitoring, and remediation strategies. Proficient in leading teams and translating technical findings into business contexts while ensuring compliance with regulatory standards.

Highest-signal resume keywords

SaaS Security ManagementSecurity Configuration ManagementCloud Security PostureSecurity Monitoring TechnologiesIndustry Certifications (CISSP, CCSP, CISM)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Configuration ManagementCloud SecuritySaaS SecurityConfiguration MonitoringRisk AssessmentAPI IntegrationsIdentity and Access ManagementData ProtectionConfiguration-as-CodeSecurity Logging

Soft Skills

LeadershipRelationship BuildingProblem SolvingAccountabilityPrioritization

Tools & Technologies

Adaptive ShieldAppOmniObsidian SecurityMicrosoft Defender for Cloud AppsNetskopePalo Alto Networks SaaS SecurityMicrosoft 365SalesforceServiceNowWorkday

Certifications & Qualifications

CISSPCCSPCISMMicrosoft Security CertificationsAWS Security CertificationsAzure Security Certifications

Industry Keywords

SaaS LifecycleNIST Cybersecurity FrameworkCIS BenchmarksRegulatory ComplianceAudit-Driven Environments

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityServiceNowSnowflake

About the role

Key responsibilities & impact

Lead the proactive management and enhancement of SaaS security configuration practices at U.S. Bank
Lead security configuration analysts and engineers
Define strategic scope, implementation approaches, and tactical execution of SaaS security capabilities
Define security configuration expectations and instantiate monitoring capabilities across the SaaS ecosystem
Partner with Information Security, Technology, SaaS application owners, risk and control functions, and business stakeholders
Translate SaaS security principles, control requirements, and configuration standards into monitoring, engineering, and remediation activities
Develop and maintain a risk-oriented SaaS security configuration strategy and roadmap
Define security configuration expectations across identity and access management, privileged access, authentication, external sharing, data protection, integrations, API access, logging, administrative settings, and security controls
Own SaaS security configuration monitoring and posture management capabilities, including platform onboarding and operational processes
Establish processes for identifying and evaluating configuration weaknesses, control gaps, configuration drift, and deviations
Define and measure success criteria, metrics, security posture, risk reduction, remediation progress, and monitoring effectiveness
Prioritize and remediate SaaS configuration risks with application owners and technology, architecture, identity, data security, and risk teams
Establish risk-based approaches for evaluating and prioritizing SaaS platforms
Improve SaaS security expectations and monitoring capabilities through feedback loops
Ensure practices support regulatory, compliance, risk-management, and audit obligations
Monitor evolving SaaS security risks, threats, technology changes, and platform capabilities
Build, develop, and retain technical talent across SaaS security, configuration engineering, posture management, and automation

Requirements

What you’ll need

Bachelor’s degree or equivalent experience
5+ years of progressive leadership or technical leadership experience in SaaS security, security configuration management, cloud security, security engineering, security architecture, or security technology management
Proven success implementing or leading security configuration, SaaS security, cloud security posture, or comparable security engineering functions
Demonstrated understanding of security configuration risks associated with SaaS technologies, including identity, authentication, authorization, privileged access, external collaboration, data exposure, third-party integrations, APIs, and security logging
Experience establishing or operating security monitoring across a broad portfolio of SaaS technologies
Experience with SaaS security or security posture technologies such as Adaptive Shield, AppOmni, Obsidian Security, Microsoft Defender for Cloud Apps, Netskope, Palo Alto Networks SaaS Security, or comparable platforms
Demonstrated ability to translate technical SaaS configuration findings into business and risk context
Demonstrated thought leadership within highly regulated, risk-sensitive, or audit-driven environments
Industry certifications such as CISSP, CCSP, CISM, Microsoft security certifications, AWS or Azure security certifications, or comparable security credentials
Experience leading technical security processes and teams responsible for configuration monitoring, posture management, or remediation
Strong understanding of the SaaS lifecycle
Experience defining and applying secure configuration baselines or control expectations across multiple SaaS platforms
Understanding of Microsoft Entra ID, SAML, OAuth/OIDC, MFA, conditional access, privileged access, service accounts, API integrations, and third-party application authorization
Experience with major enterprise SaaS platforms such as Microsoft 365, Salesforce, ServiceNow, Workday, GitHub, Snowflake, and similar services
Experience implementing security monitoring and configuration assessment using SSPM or comparable technologies
Understanding of CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, and applicable regulatory control frameworks
Understanding of APIs, scripting, workflow automation, and configuration-as-code concepts
Strong technical background in SaaS security, cloud security, configuration engineering, security architecture, identity security, or a similar discipline
Strong understanding of leadership principles, including urgency, accountability, delivery, relationship building, prioritization, and problem solving

Benefits

Comp & perks

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension