[Hiring] SaaS Remediation Specialist @DMS Vision

Role Description

Act as liaison between ATA IT/IS, AZL business owners, Group IT/IS, and SaaS vendors.

• Validate applicability and define remediation approach
• Coordinate and track implementation through completion
• Collect remediation evidence and documentation
• Submit completed items to the Recommendation Resolution Group
• Support clarification requests
• Track and govern contract-based recommendations as well as configuration-based recommendations

Out of scope:

• Priority 2 or 3 recommendations
• Non SaaS platforms
• Security testing or assessments
• Risk ownership or approval authority
• Contract negotiation or legal drafting
• BAU operational support or CAB approvals

Qualifications

• Very broad and deep understanding of Cloud Security concepts. CCSK/CCSP/related cloud certifications are highly desired.
• Working knowledge of cloud security concepts in AWS & Azure for SaaS products is highly desired.
• Strong consultative/advisory mindset with impeccable recommendations.
• End-to-end visibility on how a recommendation will manifest when implemented.
• High sense of vendor product documentation reading and understanding.
• Solid vendor-based communication skills.
• Very good documentation skills including architecture diagrams and presentations.

Requirements

• Ability to grasp gaps from design phase to ops phase.
• Ability to ask the right technical questions to SaaS product vendors across all security aspects.
• Conduct solid product evaluations and inspect the product working by throwing in a security scenario.
• Gather working evidence to pass/fail a security control for the SaaS vendor.
• Review security reports from vendors (SOC 2 Type 1 & 2, CSA Star, etc.), design diagrams, workflow evaluations, and maturity model evaluations.

Company Description