Job Description

Responsibilities

Program & Strategy

  • Build the enterprise SaaS Security program: charter, operating model, RACI, roadmap, control framework mapping to ISO 27001, and KPIs.
  • Stand up a single source of truth for SaaS inventory (shadow IT included), integrating procurement, SSO/IDP, network/DNS/forward proxy, CASB/SSE, SSPM, and expense data.
  • Define SaaS risk tiering and baseline control requirements by data classification and business criticality.

    • Architecture & Engineering

  • Implement and operationalize SSPM and extend existing capabilities in CASB/SSE: continuous posture assessment, misconfiguration detection, and auto-remediation pipelines.
  • Engineer governed OAuth/consent patterns across IDP and key platforms (e.g., Salesforce, Microsoft 365/Entra ID, Workday, Atlassian, and Others):
  • Enterprise app catalogs, pre-approved scopes, just-in-time reviews, least privilege scopes, refresh token hygiene, IP/session rest...

    • Ready to Apply?

    Take the next step in your AI career. Submit your application to CoStar Group today.

    Submit Application