Lead Information Security Consultant - SaaS Security Configuration

U.S. Bank•Minneapolis, MN

9d•Hybrid

About The Position

The SaaS Security Configuration Manager is a leadership role responsible for proactively managing and improving U.S. Bank’s SaaS security configuration practices. The role leads security configuration analysts and engineers and defines strategic scope, implementation approaches, and execution for capabilities that establish, monitor, assess, and improve the security configuration of SaaS applications across the organization. As part of the Information Security Posture and Configuration Management leadership team, the manager defines security configuration expectations and establishes monitoring across a diverse SaaS environment. The role partners with Information Security, Technology, SaaS application owners, risk and control functions, and business stakeholders to identify configuration risks, detect configuration drift, measure security posture, and drive remediation. The position also develops the team, communicates priorities and program objectives, and translates security expectations into measurable configuration requirements in a large-scale, highly regulated technology environment. The role requires working from a U.S. Bank location three or more days per week. The posted pay range is $133,365–$156,900, with the actual range potentially varying by location. U.S. Bank also offers benefits and incentive and recognition programs, subject to eligibility requirements.

Requirements

Bachelor’s degree or equivalent experience.
At least 5 years of progressive leadership or technical leadership experience in SaaS security, security configuration management, cloud security, security engineering, security architecture, or security technology management.
Proven success implementing or leading security configuration, SaaS security, cloud security posture, or comparable security engineering functions.
Demonstrated understanding of SaaS configuration risks, including identity, authentication, authorization, privileged access, external collaboration, data exposure, third-party integrations, APIs, and security logging.
Experience establishing or operating security monitoring across a broad portfolio of SaaS technologies.
Experience with SaaS security or security posture technologies such as Adaptive Shield, AppOmni, Obsidian Security, Microsoft Defender for Cloud Apps, Netskope, Palo Alto Networks SaaS Security, or comparable platforms.
Ability to translate technical SaaS configuration findings into business and risk context to support prioritization and informed remediation.
Demonstrated thought leadership in highly regulated, risk-sensitive, or audit-driven environments.
Industry certifications such as CISSP, CCSP, CISM, Microsoft security certifications, AWS or Azure security certifications, or comparable security credentials.

Nice To Haves

Experience leading technical security processes and teams responsible for configuration monitoring, posture management, or remediation.
Strong understanding of the SaaS lifecycle, including acquisition and onboarding, security assessment, integration, configuration, operation, change, and decommissioning.
Experience defining and applying secure configuration baselines or control expectations across multiple SaaS platforms.
Understanding of identity technologies and concepts, including Microsoft Entra ID, SAML, OAuth/OIDC, MFA, conditional access, privileged access, service accounts, API integrations, and third-party application authorization.
Experience with major enterprise SaaS platforms such as Microsoft 365, Salesforce, ServiceNow, Workday, GitHub, Snowflake, and similar business-critical services.
Experience implementing security monitoring and configuration assessment using SaaS Security Posture Management (SSPM) or comparable technologies.
Understanding of security configuration standards and control frameworks such as CIS Benchmarks, NIST Cybersecurity Framework, NIST SP 800-53, and applicable regulatory frameworks.
Understanding of automation and engineering approaches for retrieving, evaluating, monitoring, and remediating SaaS configuration settings, including APIs, scripting, workflow automation, and configuration-as-code concepts.
Strong technical background in SaaS security, cloud security, configuration engineering, security architecture, identity security, or a similar discipline.
Strong understanding of leadership principles, including urgency, accountability, delivery, relationship building, prioritization, and problem solving.

Responsibilities

Translate SaaS security principles, control requirements, and configuration standards into monitoring, engineering, and remediation activities.
Develop and maintain a risk-oriented SaaS security configuration strategy and roadmap aligned with Information Security needs, regulatory requirements, and business objectives.
Define security configuration expectations for SaaS platforms, including identity and access management, privileged access, authentication, external sharing, data protection, integrations, API access, logging, administrative settings, and security controls.
Own the execution scope for SaaS security configuration monitoring and posture management, including onboarding platforms into monitoring solutions and establishing sustainable operating processes.
Establish processes to identify and evaluate configuration weaknesses, control gaps, configuration drift, and deviations from security expectations.
Define and measure success criteria, including coverage, security posture, risk reduction, remediation progress, and monitoring effectiveness.
Partner with SaaS application owners, technology teams, security architecture, identity and access management, data security, and risk functions to prioritize and remediate risks.
Establish risk-based approaches for evaluating SaaS platforms according to risk, criticality, data sensitivity, functionality, administrative model, and security capabilities.
Foster feedback loops with technology, business, and security leaders to continuously improve security expectations and monitoring capabilities.
Ensure SaaS security technologies and configuration practices support regulatory, compliance, risk-management, and audit obligations.
Monitor evolving SaaS security risks, threats, technology changes, and platform capabilities and incorporate them into configuration monitoring and security practices.
Build, develop, and retain technical talent in SaaS security, configuration engineering, security posture management, and automation.

Benefits

Healthcare coverage, including medical, dental, and vision
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation, from two to five weeks depending on salary grade and tenure
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension