Business Systems Security Analyst

About the Role:

Your Impact:

• Own data governance across business systems: what’s collected, why, retention, and data flows between systems
• Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools
• Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle
• Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access
• Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools
• Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts
• Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts
• Partner with system owners to remediate risks and embed security into business processes
• Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols

Your Qualifications:

• Experience securing SaaS business platforms and their integrations, including identity and access management across those environments
• Solid understanding of data governance principles: data classification, retention, and data flow mapping
• Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms
• Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management
• Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data
• Experience with third-party/vendor risk assessment and SaaS security posture management
• Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps)

Standout Qualities:

• Hands-on experience with SSPM tools or Salesforce security tooling
• Familiarity with OAuth/API integration security and supply-chain risk
• Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows)
• Knowledge of Salesforce is a strong plus

Team Dynamics:

You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal.

Our Work Style:

• Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling.
• Collaborative environment working closely with RevOps, Legal, and Marketing teams.
• Hybrid mode.

Benefits & Perks:

• 5 Weeks of paid vacation
• Sick Leave Compensation 
  • 5 Paid Uncertified Sick Days
  • 2 weeks fully paid w/ medical certificate, additional 
  • 4 weeks paid at 80% salary rate
• Parental Leave (fully paid): 18 Weeks Maternity / 4 Week Paternity 
• 2 Volunteer Days
• Meal Vouchers (CZK 220 per working day)
• Annual Prague Travel Card (Lítačka)
• Hybrid Working Model
• Benefit budget with flexible options, including a MultiSport card, Canadian Medical membership, contributions to a pension savings plan and additional choices available through Benefit Plus

What's Next?

• Recruiter Screen (30 mins)
• Department Interview / Technical Discussion (60 mins)
• Cultural Interview with Hiring Manager, CISO, and HRBP

Your recruitment buddy will be Aleksandar Chernev, Senior Technical Recruiter.

#LI-AC1