below marketmost similar roles pay hereabove market
This role pays less than
77%
of similar roles. Most pay
$150,487–$202,075
— the blue band above.
At the midpoint, this role pays about
$145k
versus about
$176k
for comparable roles.
Based on 240 similar postings.
Employer
About US Bank
U.S. Bank (U.S. Bancorp) is the fifth-largest bank in the United States, providing retail banking, corporate and commercial banking, wealth management, and payment services to millions of customers. Industry: Banking & Financial Services
US Bank currently has
43 open roles
on FindRole.
Listed pay typically runs
$119,765–$140,900
across 24 roles with salary data.
JOB TITLE: Lead Information Security Consultant - SaaS Security Configuration
The Lead Information Security Consultant - SaaS Security Configuration joins the Information Security Posture and Configuration Management leadership team. This leadership role manages a team of security configuration analysts and engineers to proactively manage and enhance SaaS security configuration practices. You will define strategic scopes, implementation approaches, and tactical execution for establishing, monitoring, and improving security configurations across a diverse SaaS ecosystem. Key responsibilities include translating security principles into actionable monitoring and remediation activities, developing risk-oriented roadmaps, and identifying configuration drift. You will utilize tools like Adaptive Shield, AppOmni, Obsidian Security, Microsoft Defender for Cloud Apps, and Netskope. The role addresses configuration risks involving identity, authentication, and data protection within a highly regulated environment, ensuring compliance with frameworks like CIS Benchmarks and NIST.
Develop and maintain a risk-oriented SaaS security configuration strategy and roadmap aligned with regulatory requirements.
Translate security principles and control requirements into actionable monitoring, engineering, and remediation activities.
Define security configuration expectations for identity management, data protection, API access, and administrative settings.
Own the execution of SaaS security configuration monitoring and onboard platforms into monitoring solutions.
Establish processes for identifying and evaluating configuration weaknesses, control gaps, and configuration drift.
Define and measure success metrics for SaaS configuration coverage, risk reduction, and remediation progress.
Partner with stakeholders to prioritize and remediate identified SaaS configuration risks across the organization.
Build and develop a technical team with expertise in SaaS security and configuration engineering.
What we're looking for
Bachelor’s degree or equivalent experience.
5+ years of progressive leadership or technical leadership experience in SaaS security, security configuration management, cloud security, security engineering, security architecture, or security technology management.
Proven success implementing or leading security configuration, SaaS security, cloud security posture, or comparable security engineering functions.
Demonstrated understanding of security configuration risks associated with SaaS technologies, including identity, authentication, authorization, privileged access, external collaboration, data exposure, third-party integrations, APIs, and security logging.
Experience establishing or operating security monitoring across a broad portfolio of SaaS technologies.
Experience with SaaS security or security posture technologies such as Adaptive Shield, AppOmni, Obsidian Security, Microsoft Defender for Cloud Apps, Netskope, Palo Alto Networks SaaS Security, or comparable platforms.
Demonstrated thought leadership within highly regulated, risk-sensitive, or audit-driven environments.
Industry certifications such as CISSP, CCSP, CISM, Microsoft security certifications, AWS or Azure security certifications, or comparable security credentials.
SAP
S/4HANA
Fiori
SAP BTP
SAP GRC
HANA DB
Identity and Access Management
Security Analytics
Source Code Analysis
Vulnerability Management
Onapsis
Security Bridge
Role-Based Access Control
Segregation of Duties