Business Systems Security Analyst

About this role

Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work. Wrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you. Our vision: A world where everyone is free to focus on their most purposeful work, together. About the Role: Wrike relies on a dynamically changing set of integrated SaaS tools, and securing them requires dedicated, end-to-end ownership of their data security posture. Asking questions like what data is collected, why, how long it's retained, and how it flows between systems. As Business Systems Security Analyst, you will own this space by establishing continuous data governance, SaaS integration governance, and identity & access management across our business systems. Helping Wrike stay proactive and prevention-focused rather than reactive. Your Impact: Own data governance across business systems: what's collected, why, retention, and data flows between systems Govern SaaS integrations: inventory, risk assessment, and secure onboarding/offboarding of third-party tools Manage and review access provisioning and deprovisioning across integrated SaaS platforms, ensuring least-privilege principles are enforced throughout the identity lifecycle Oversee SSO configurations, OAuth scopes, and service account permissions across business-critical systems, identifying overprivileged accounts and stale access Monitor and help harden the security posture of business-critical SaaS platforms and their connected tools Conduct periodic access reviews and certifications for SaaS platforms, with a focus on privileged and third-party system accounts Conduct security reviews of integrations from a data flow perspective before they connect to business-critical systems, including evaluating IAM implications such as API keys, OAuth tokens, and service accounts Partner with system owners to remediate risks and embed security into business processes Focus on AI-driven integration workflows: MCP, A2A, and emerging agent-based protocols Your Qualifications: Experience securing SaaS business platforms and their integrations, including identity and access management across those environments Solid understanding of data governance principles: data classification, retention, and data flow mapping Technical hands-on skills: ability to independently investigate configurations, permissions, API connections, and logs across SaaS platforms Knowledge of integration best practices: secure API design, least-privilege service accounts, token/secret management, and integration lifecycle management Understanding of AI tooling and its security implications: how AI-powered tools access, process, and store business data Experience with third-party/vendor risk assessment and SaaS security posture management Ability to work cross-functionally with business system owners (Sales Ops, Marketing Ops, RevOps) Standout Qualities: Hands-on experience with SSPM tools or Salesforce security tooling Familiarity with OAuth/API integration security and supply-chain risk Experience with AI-driven data flows and integrations (e.g., MCP, A2A, agent-based workflows) Knowledge of Salesforce is a strong plus Team Dynamics: You will be joining Wrike's 15-member global Security team led by Maksim Pekuryn, Director of Security. You will report directly to Swen Groeneveld, Head of Security Operations, whose 8-person sub-team includes Security Engineers, Application Security, and SOC specialists. You'll also work closely with cross-functional partners in RevOps, Marketing, and Legal. Our Work Style: Tech stack: Salesforce, Marketo, Salesloft, OAuth integrations, connected apps, and related business SaaS tooling. Collaborative environment working closely with RevOps, Legal, and Marketing teams. Hybrid mode. Benefits & Perks: 5 Weeks of paid vacation Sick Leave Compensation 5 Paid Uncertified Sick Days 2 weeks fully paid w/ medical certificate, additional 4 weeks paid at 80% salary rate Parental Leave (fully paid): 18 Weeks Maternity / 4 Week Paternity 2 Volunteer Days Meal Vouchers (CZK 220 per working day) Annual Prague Travel Card (Lítačka) Hybrid Working Model Benefit budget with flexible options, including a MultiSport card, Canadian Medical membership, contributions to a pension savings plan and additional choices available through Benefit Plus What's Next? Recruiter Screen (30 mins) Department Interview / Technical Discussion (60 mins) Cultural Interview with Hiring Manager, CISO, and HRBP Your recruitment buddy will be Aleksandar Chernev , Senior Technical Recruiter. p class="p1"

The employer's own description, as posted on their site. Apply on Wrike's site ↗