SAS Security Posture and Third-Party Risk Engineer

Roles & Responsibilities

SaaS Security Posture & Third-Party Risk Engineering is responsible for leading the strategy, design, and implementation of security monitoring capabilities across critical enterprise SaaS platforms and third-party technology providers. This role focuses on strengthening the organization's cybersecurity posture through continuous risk assessment, security control validation, exposure management, and automated monitoring solutions.

The position partners closely with Cyber Security, Technology, Risk, Compliance, and Business teams to identify and mitigate risks associated with SaaS applications, cloud services, and external vendors. The leader is responsible for developing scalable monitoring frameworks that provide real-time visibility into security gaps, compliance deficiencies, and emerging threats across the enterprise technology ecosystem.

Key Responsibilities Include Driving enterprise-wide SaaS Security Posture Management (SSPM) and third-party exposure monitoring programs.

Establishing continuous controls monitoring and risk assessment processes for critical SaaS applications and technology vendors.

Developing automation and analytics capabilities to proactively identify security vulnerabilities, misconfigurations, and compliance risks.

Leveraging Python-based engineering solutions, AI/ML technologies, and advanced analytics to improve risk detection, prioritization, and remediation.

Collaborating with cross-functional stakeholders to define security requirements, evaluate vendor security controls, and enhance overall cyber resilience.

Providing executive-level reporting and insights on technology risk, security posture, control effectiveness, and emerging threats.

Driving innovation through the adoption of modern security technologies, AI-driven monitoring, and risk intelligence capabilities.

Salary Range: $90,000 to $115,000 per year

Qualifications: BACHELOR OF COMPUTER SCIENCE