SaaS Security Delivery Lead

SaaS Security Delivery Lead

About the Job

BluOcean Cyber is seeking a SaaS Security Delivery Lead to lead client engagements focused on SaaS security, security program maturity, and modern enterprise risk reduction. This role is ideal for a consulting-oriented security leader who can manage complex delivery work, build trusted client relationships, coordinate cross-functional teams, and ensure high-quality deliverables across multiple security initiatives.

You will serve as a client-facing delivery lead, trusted advisor, and engagement manager across SaaS security programs. You will help clients identify risk, prioritize remediation, improve security controls, and mature their security operating models across enterprise SaaS environments.

The ideal candidate brings strong cybersecurity knowledge, Big 4 or comparable consulting delivery experience, executive communication skills, and the ability to translate technical findings into clear, actionable deliverables. This is a leadership role for someone who can bring structure to ambiguous client needs, manage teams toward measurable outcomes, and ensure BluOcean delivers practical, high-impact work.

This role is well suited for someone who enjoys leading engagements from kickoff through final delivery, managing client expectations, coordinating resources, developing executive-ready materials, and helping scale repeatable consulting delivery capabilities in a fast-moving startup environment.

What You'll Do

• Lead client engagements focused on SaaS security program development, risk reduction, control improvement, and implementation planning.
• Own end-to-end engagement delivery, including scope, timelines, workplans, stakeholder coordination, status reporting, risks, issue resolution, deliverable quality, and client outcomes.
• Manage day-to-day client engagement activities, including kickoff planning, recurring client meetings, executive updates, progress tracking, and expectation management.
• Partner with clients to understand business goals, security priorities, operational constraints, and risk tolerance, then translate those needs into practical delivery plans and prioritized recommendations.
• Develop polished, client-ready deliverables, including assessment reports, maturity models, security roadmaps, executive presentations, implementation plans, risk summaries, operating models, and business cases.
• Coordinate security engineers, consultants, architects, and client stakeholders to ensure work is completed on time, aligned to scope, and communicated clearly.
• Lead SaaS security program workstreams from discovery through recommendations and execution planning, including current-state assessment, gap analysis, roadmap development, and outcome measurement.
• Facilitate workshops and working sessions with CISOs, security leaders, IT teams, product teams, engineering teams, and business stakeholders.
• Translate complex technical findings into clear, business-aligned guidance for technical teams, executives, and non-technical audiences.
• Identify engagement risks, delivery blockers, scope changes, and client concerns early, and drive resolution in partnership with internal and client leadership.
• Support client relationship management by building trust, maintaining strong communication, and helping identify opportunities for additional value.
• Apply security frameworks and control models to help clients evaluate risk, prioritize improvements, and strengthen security governance across SaaS and cloud-connected environments.
• Partner with internal leadership to build repeatable delivery playbooks, templates, methodologies, client-facing collateral, and consulting offerings.
• Help BluOcean scale its consulting delivery model by bringing structure, rigor, accountability, and strong client-service practices into a high-growth startup environment.
• Mentor consultants and security team members on consulting delivery, client communication, deliverable development, executive presence, and engagement management.

What You'll Need — Required

• 8–12 years of progressive cybersecurity, technology risk, security consulting, or security program delivery experience.
• Required experience working in a Big 4 or comparable consulting environment, such as Deloitte, EY, KPMG, PwC, Accenture, or another recognized cybersecurity, technology risk, or professional services consulting firm.
• Proven experience leading client-facing security engagements, including managing scope, timelines, deliverables, stakeholders, risks, and outcomes.
• Strong consulting delivery skills, including project planning, meeting facilitation, status reporting, issue management, executive communication, and client expectation management.
• Experience developing client-ready deliverables such as assessment reports, maturity models, risk summaries, roadmaps, implementation plans, executive presentations, and program recommendations.
• Strong understanding of cybersecurity concepts across SaaS security, cloud security, application security, identity and access management, security architecture, risk management, and security operations.
• Experience leading security programs, assessments, implementations, or transformation initiatives across complex enterprise environments.
• Ability to work with technical teams to understand findings, risks, and control gaps, then translate them into clear business and executive-level recommendations.
• Experience applying security frameworks and control models such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Benchmarks, CSA CCM, or similar.
• Strong stakeholder management skills, with the ability to engage CISOs, security leaders, IT leaders, engineering teams, product teams, and business stakeholders.
• Demonstrated ability to lead teams, coordinate contributors, manage ambiguity, create structure, and drive work to completion.
• Excellent written and verbal communication skills, with strong attention to detail and the ability to produce polished, client-ready materials.
• High ownership, accountability, and follow-through, with a strong focus on delivery quality and measurable client outcomes.
• Comfort operating in a startup environment where priorities evolve quickly, ownership is high, and leaders are expected to be hands-on when needed.

What Sets You Apart — Preferred

• Experience delivering SaaS security, SaaS risk, or SaaS Security Posture Management programs.
• Familiarity with enterprise SaaS platforms such as Microsoft 365, Salesforce, Google Workspace, ServiceNow, Workday, GitHub, or similar environments.
• Familiarity with SaaS Security Posture Management tools such as AppOmni, Falcon Shield, Obsidian Security, Reco, DoControl, Normalyze, or similar platforms.
• Experience leading engagements related to SaaS misconfiguration management, identity risk, excessive permissions, OAuth app review, third-party integration risk, or SaaS governance.
• Experience with cloud security, application security, product security, infrastructure-as-code security, CI/CD security, or security operations programs.
• Experience building consulting methodologies, delivery frameworks, templates, playbooks, technical enablement materials, or go-to-market security offerings.
• Experience building dashboards, metrics, executive reporting, control monitoring, or program governance materials.
• Ability to support business development activities, including scoping discussions, proposal inputs, solution shaping, and expansion opportunities.
• Relevant certifications such as CISSP, CCSP, CCSK, CISM, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, PMP, or similar.

Why Join BluOcean Cyber

BluOcean Cyber is building at the forefront of SaaS and modern security transformation. This is an opportunity to step into a client-facing leadership role where you will help shape how security programs are delivered, matured, and scaled. We are scaling quickly across industries including Fortune 200 enterprises, leading fintech organizations, and alternative investment firms.

You will work with ambitious clients, complex environments, and a team that values ownership, clarity, speed, technical depth, and practical impact. If you are ready to lead engagements, manage client relationships, build high-quality deliverables, and bring structure to a growing consulting organization, this role offers the opportunity to influence and deliver at meaningful scale.

If you are passionate about helping clients solve complex security challenges — and you are ready to lead delivery from strategy through execution — we want you on our team.

Apply now.