Lead Information Security Consultant - SaaS Security Configuration

U.S. Bank•Minneapolis, MN

10d•$133,365 - $156,900•Hybrid

About The Position

The SaaS Security Configuration Manager is a leadership role accountable for proactively managing and enhancing SaaS security configuration practices at U.S. Bank. The role leads security configuration analysts and engineers and defines the strategic scope, implementation approaches, and tactical execution of capabilities that establish, monitor, assess, and improve the security configuration of SaaS applications used across the organization. As a member of the Information Security Posture and Configuration Management leadership team, this position defines security configuration expectations and establishes monitoring capabilities across a diverse and evolving SaaS ecosystem. It partners with Information Security, Technology, SaaS application owners, risk and control functions, and business stakeholders to identify configuration risk, detect configuration drift, measure security posture, and drive remediation. The role requires organizing and mobilizing a skilled team, communicating prioritized objectives to business partners, translating security expectations into measurable configuration requirements, and operating in a large-scale technology environment with stringent regulatory requirements and diverse business needs. The role requires working from a U.S. Bank location three or more days per week. The pay range is $133,365 to $156,900. U.S. Bank offers a benefits package that includes healthcare, insurance, retirement plans, paid leave, and other benefits subject to eligibility requirements.

Requirements

Bachelor’s degree or equivalent experience.
At least 5 years of progressive leadership or technical leadership experience in SaaS security, security configuration management, cloud security, security engineering, security architecture, or security technology management.
Proven success implementing or leading security configuration, SaaS security, cloud security posture, or comparable security engineering functions.
Demonstrated understanding of SaaS security configuration risks, including identity, authentication, authorization, privileged access, external collaboration, data exposure, third-party integrations, APIs, and security logging.
Experience establishing or operating security monitoring across a broad portfolio of SaaS technologies.
Experience with SaaS security or security posture technologies such as Adaptive Shield, AppOmni, Obsidian Security, Microsoft Defender for Cloud Apps, Netskope, Palo Alto Networks SaaS Security, or comparable platforms.
Ability to translate technical SaaS configuration findings into business and risk context to support prioritization and informed remediation decisions.
Demonstrated thought leadership in highly regulated, risk-sensitive, or audit-driven environments.
Industry certifications such as CISSP, CCSP, CISM, Microsoft security certifications, AWS or Azure security certifications, or comparable security credentials.

Nice To Haves

Experience leading technical security processes and teams responsible for configuration monitoring, posture management, or remediation.
Strong understanding of the SaaS lifecycle, including acquisition and onboarding, security assessment, integration, configuration, operation, change, and decommissioning.
Experience defining and applying secure configuration baselines or control expectations across multiple SaaS platforms.
Understanding of identity technologies and concepts, including Microsoft Entra ID, SAML, OAuth/OIDC, MFA, conditional access, privileged access, service accounts, API integrations, and third-party application authorization.
Experience with major enterprise SaaS platforms such as Microsoft 365, Salesforce, ServiceNow, Workday, GitHub, Snowflake, and similar business-critical SaaS services.
Experience implementing security monitoring and configuration assessment using SaaS Security Posture Management (SSPM) or comparable technologies.
Understanding of security configuration standards and control frameworks such as CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, and applicable regulatory control frameworks.
Understanding of automation and engineering approaches to retrieve, evaluate, monitor, and remediate SaaS configuration settings, including APIs, scripting, workflow automation, and configuration-as-code concepts.
Strong technical background in SaaS security, cloud security, configuration engineering, security architecture, identity security, or a similar discipline.
Strong understanding of leadership principles, including urgency, accountability, delivery, relationship building, prioritization, and problem solving.

Responsibilities

Translate SaaS security principles, control requirements, and configuration standards into actionable monitoring, engineering, and remediation activities for the team.
Develop and maintain a risk-oriented SaaS security configuration strategy and roadmap aligned with Information Security program needs, regulatory requirements, and business objectives.
Define security configuration expectations for SaaS platforms, including identity and access management, privileged access, authentication, external sharing, data protection, integrations, API access, logging, administrative settings, and security controls.
Own execution scope for SaaS security configuration monitoring and posture management capabilities, including onboarding SaaS platforms into monitoring solutions and establishing sustainable operational processes.
Establish processes to identify and evaluate configuration weaknesses, control gaps, configuration drift, and deviations from security expectations.
Define and measure success criteria, including metrics for SaaS configuration coverage, security posture, risk reduction, remediation progress, and monitoring effectiveness.
Partner with SaaS application owners, technology teams, security architecture, identity and access management, data security, and risk functions to prioritize and remediate configuration risks.
Establish scalable approaches to evaluate SaaS platforms based on risk, criticality, data sensitivity, functionality, administrative model, and security capabilities, and prioritize monitoring and engineering efforts accordingly.
Foster feedback loops with technology, business, and security leaders to continually improve SaaS security expectations and monitoring capabilities.
Ensure SaaS security technologies and configuration practices support regulatory, compliance, risk-management, and audit obligations in a highly regulated environment.
Maintain awareness of evolving SaaS security risks and translate emerging threats, technology changes, and platform capabilities into improvements to configuration monitoring and security practices.
Build, develop, and retain technical talent in SaaS security, configuration engineering, security posture management, and automation.

Benefits

Healthcare coverage, including medical, dental, and vision.
Basic term and optional term life insurance.
Short-term and long-term disability insurance.
Pregnancy disability and parental leave.
401(k) and employer-funded retirement plan.
Paid vacation, from two to five weeks depending on salary grade and tenure.
Up to 11 paid holiday opportunities.
Adoption assistance.
Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law.
Incentive and recognition programs.
Equity stock purchase, 401(k) contribution, and pension, subject to eligibility requirements.