Senior SaaS Security Analyst

About the role

Invesco is seeking a Senior SaaS Security Analyst to protect its cloud‑based applications and data. You will work closely with IAM, AppSec, SecOps and engineering teams to ensure secure SaaS adoption across the organization.

Key responsibilities

• Continuously monitor SaaS applications for misconfigurations, risky behavior, and deviations from security baselines.
• Review, prioritize and remediate SaaS security findings using risk‑based strategies and industry benchmarks.
• Conduct periodic SaaS posture audits and produce reports for leadership.
• Support SaaS onboarding projects with security configuration reviews.
• Track and report SaaS security KPIs, risk scores and DLP alerts.
• Investigate incidents, perform risk reviews, and operationalize data vulnerability management.
• Prepare dashboards, compliance reports and deliver user awareness training on secure data practices.
• Lead remediation plans for DLP‑related vulnerabilities and design network security controls.

Required profile

• 8+ years of information security experience.
• Strong understanding of SaaS security frameworks and controls.
• Experience with SSPM tools and enterprise DLP platforms.
• Familiarity with large SaaS platforms and cloud environments.
• Preferred certifications: AWS Cloud Practitioner, CCSP, CISSP.

Required skills

• SaaS security
• SSPM tools
• OAuth, API tokens, SSO, SCIM provisioning, RBAC
• CIS Benchmarks, CSA CMM, SOC2, ISO 27001
• Enterprise DLP platforms
• Data classification, labeling, protection frameworks
• Vulnerability management processes
• Network security controls
• AWS Cloud
• CCSP
• CISSP

What we offer

• Competitive salary range $85,000‑$90,000 CAD per year.
• Full‑time permanent position with onsite work model (minimum four days per week in the office).
• Opportunity to work in a global investment firm with intelligent colleagues and diverse exposure.