SaaS Security & Risk Governance Lead; Remote

Job Responsibilities

Program & Governance Leadership

• Coordinate, partner, and align security activities across security and IT teams supporting enterprise platforms and SaaS/PaaS environments.

• Support implementation and ongoing maintenance of SaaS security governance processes aligned with internal policies, regulatory requirements, and industry standards.

• Coordinate security initiatives across core platforms and provide status reporting, issue tracking, and risk visibility to leadership.

• Track and report key risk indicators (KRIs), metrics, and compliance status to support decision-making and continuous improvement.

Control Management & Compliance Operations

• Help define, implement, andmaintainsecurity baselines, standards, and control frameworks for SaaS and PaaS solutions.

• Support control lifecycle management, including control definition, documentation, and validation.

• Assistin mapping controls to applicable frameworks (e.g., NIST, ISO 27001, OWASP) and support consistent implementation.

• Support internal and external audits by ensuring audit readiness andevidencecollection.

• Help coordinate and support security assessments, testing activities, and risk evaluations.

Risk & Exception Management

• Coordinate activities within the security exception process, including risk documentation, stakeholder engagement, approval tracking, and remediation follow-up.

• Monitor exception trends related to SaaS and PaaS workloads.

SaaS Security & Platform Governance

• Help coordinate security governance for critical platforms including Workday, Salesforce, Snowflake, Service Now, and Microsoft 365.

• Support implementation and ongoing maintenance of approved security baselines for new and existing platform implementations.

• Coordinate continuous control monitoring activities and assist in identifying configuration drift or compliance gaps.

• Partner with platform owners to integrate security into configuration, change, and release management processes.

Stakeholder Engagement & Enablement

• Partner with business stakeholders to influence secure adoption and improve operational security maturity.

• Collaborate with IAM and data governance teams to ensure strong access controls, RBAC models, and data protection practices across SaaS platforms.

• Act as a liaison between security, compliance, IT, and business teams to support alignment, communication, and issue resolution.

Third-Party Risk & Vendor Security

• Coordinate with business stakeholders and vendors to ensure SaaS and PaaS solutions complete the SGRC Vendor Risk Management process andmaintainrequired assessments.

Required Knowledge, Skills, and Abilities

• Experience in security program management, cloud security, SaaS governance, and SGRC functions.

• Strong knowledge of security frameworks (e.g., NIST, ISO 27001, OWASP).

• Demonstrated ability to operationalize policies into effective technical and procedural controls.

• Ability to influence cross-functional teams and effectively communicate risk to stakeholders at multiple levels.

• Familiarity with enterprise SaaS platforms and cloud security control environments.

• Experience supporting audits, compliance programs, and continuous control monitoring.

• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.

• Experience with metrics-driven security programs, including KPI/KRI development and reporting.

• Demonstrated ability to work effectively with business partners.

• Strong analytical, organizational, and stakeholder management skills.

• 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related disciplines.

Required/Preferred Education and Licenses

• Bachelor's degree

• CISSP, CISM, CRISC, CCSK, or comparable security certification preferred.

• Cloud security certifications (AWS, Azure, or GCP) preferred.

• AI Training

#LI-Remote