Salesforce Compliance & Data Governance Analyst

Sprezzatura; Arlington (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401(k) with match

Paid time off

Holidays

Job summary

Sprezzatura is seeking a Salesforce Compliance & Data Governance Analyst to own compliance and data governance workstreams for a federal client on Salesforce. You will conduct audits (AC-2), manage POAMs, and drive data classification and CodeScan configuration within an Agile team.

The role blends hands-on auditing with governance strategy, requires a Public Trust clearance, and offers hybrid Arlington, VA work arrangements, with direct stakeholder interaction and rapid delivery expectations.

Qualifications

• 5+ years in compliance auditing, IT governance, or data governance, ideally in federal/government IT.
• Bachelor’s degree in business, information systems, or related field.
• Basic understanding of Salesforce as an App Development platform; hands-on Admin with declarative capabilities.

Responsibilities

• Own audit workstreams end-to-end: user provisioning reviews, POAM tracking, batch job audits, and bi-yearly data quality audits.
• Design and stand‑up new audit workstreams from the ground up, establishing repeatable, ongoing audit processes.
• Drive data classification initiatives; map Salesforce fields to VA standards (CUI, FIPS-199, PTA/PIA) and identify governance gaps.
• Configure CodeScan reports and support auditing of new rule enforcement as the platform evolves.
• Participate actively in Agile ceremonies (PI/sprint planning, backlog refinement).
• Proficient at writing clear, well-structured Agile Stories tracked in Jira.
• Use AI tools (e.g., Claude) to accelerate research and documentation, and critically evaluate that output before acting on it.
• Present findings, business value, and recommendations directly to leadership and government stakeholders.

Skills

Compliance auditing

IT governance

Data governance

Salesforce administration

NIST AC-2 knowledge

FIPS-199 familiarity

POAM processes

DevSecOps tools

Jira

Confluence

SharePoint

Microsoft Office

Agile/Scrum

Effective communication

Education

Bachelor's degree in business, information systems, or related field

Tools

CodeScan

ZAP

Jira

Confluence

SharePoint

Job description

Position Title

Salesforce Compliance & Data Governance Analyst

Location

Hybrid (2 days a week Arlington, VA)

Other Considerations

U.S. Citizen or Permanent Resident (Required)

Position Summary

We're seeking a self-directed Compliance & Data Governance Analyst to own and build compliance and data governance workstreams supporting a federal client's extensive Salesforce platform. This role blends traditional compliance auditing (access reviews, POAMs, data quality) with data classification strategy, CodeScan administration, and cross-team collaboration in an Agile environment.

This is a hands‑on, high‑ownership role. You'll independently research, synthesize findings, and present clear recommendations to technical and government stakeholders, not just gather information for someone else to interpret.

Responsibilities

• Own audit workstreams end-to-end: user provisioning (AC-2) reviews, POAM tracking, batch job audits, and bi-yearly data quality audits
• Design and stand‑up new audit workstreams from the ground up, establishing repeatable, ongoing audit processes.
• Drive data classification initiatives; able to map Salesforce fields to VA standards (CUI, FIPS-199, PTA/PIA) and identify governance gaps
• Configure CodeScan reports and support auditing of new rule enforcement as the platform evolves
• Participate actively in Agile ceremonies (PI/sprint planning, backlog refinement)
• Proficient at writing clear, well-structured Agile Stories tracked in Jira
• Use AI tools (e.g., Claude) to accelerate research and documentation, and critically evaluate that output before acting on it
• Present findings, business value, and recommendations directly to leadership and government stakeholders

Qualifications

• Public Trust clearance is required; employment is contingent upon a successful background investigation
• Bachelor’s degree in business, information systems, or related field
• 5+ years in compliance auditing, IT governance, or data governance, ideally in a federal/government IT environment
• Basic understanding of Salesforce as an Application Development platform. Ideally with hands‑on experience as a Salesforce Admin with some declarative capabilities. Certification or active Trailhead progress a plus but not required.
• Familiarity with NIST AC-2, FIPS-199, POAM processes, and VA compliance frameworks (PTA/PIA) or similar industry‑specific concepts
• Working knowledge of code scanning (CodeScan), web security scanning (ZAP), and related DevSecOps toolsRequired hard skills, tools, frameworks, technologies, etc. with years of experience
• Experience working in Agile/Scrum environments, with strong Jira hygiene for work planning and execution and daily time tracking for capacity planning
• Strong written and verbal communication skills, including the ability to defend findings and business value to senior stakeholders independently
• Ability to design and run small projects (in the form of Epics) given access to SMEs and with the support of a BA and Scrum Master
• Comfort using AI tools to support analysis and documentation, with strong underlying critical thinking, you drive the conclusion, not just the research
• Proficiency with Confluence, SharePoint, and Microsoft Office (or similar)

WORKING CONDITIONS

Standard Business hours are Monday through Friday 8:00 – 5:00 PM ET. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

PAY RANGE

The base salary range for this position is $90,000 to $120,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good‑faith estimate of the compensation for this position at the time of posting.

Benefits

• Medical, Dental, and Vision
• Health Saving Account (when enrolled in eligible plan) with Company contribution
• Company paid Life, Accidental Death, Short-term & Long-term Disability
• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
• Voluntary Medical & Dependent Care Flexible Spending Accounts
• Accrued Paid Time Off & Company Paid Holidays
• 401(k) Retirement Plan with Company match

WORK AUTHORIZATION

Sprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.

Sprezzatura

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve—delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity—turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.

EEO STATEMENT

Sprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.

This job description is not intended to be an employment contract and does not guarantee employment for any specific duration.