Cloud Compliance & GRC Analyst (ISO/SOC)

Salesforce; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce seeks a compliance professional to lead regulatory and security controls across cloud environments. You will partner with engineering and security to translate mandates into actionable controls, drive remediation, and communicate risk to leadership.

The role focuses on audits, evidence collection automation, and continuous improvement within the GCC team, with exposure to cloud security frameworks and large-scale audit execution.

Qualifications

• 4+ years of experience in IT audit or internal controls.
• Experience with ISO 27001, SOC 1/2, HIPAA, PCI, HITRUST, SOX, FedRAMP.
• Strong analytical and problem-solving skills in a regulatory context.
• Program and stakeholder management experience with cross-functional leadership.

Responsibilities

• Serve as a cloud compliance subject matter expert, supporting audits and walkthroughs with external assessors.
• Translate complex compliance frameworks into clear, actionable deliverables; report progress and residual risk to leadership.
• Identify opportunities to automate evidence collection and document process playbooks for efficiency.
• Collaborate with cross-functional partners to operationalize audit recommendations and improve compliance posture.
• Automate evidence collection and compliance operations to drive efficiency.

Skills

IT audit

Internal controls

Cloud security

Regulatory compliance

Stakeholder management

Tools

Compliance tooling

Audit workflows

Job description

Salesforce seeks a compliance professional to lead regulatory and security controls across cloud environments. You will partner with engineering and security to translate mandates into actionable controls, drive remediation, and communicate risk to leadership.

The role focuses on audits, evidence collection automation, and continuous improvement within the GCC team, with exposure to cloud security frameworks and large-scale audit execution.