Forward-Deployed Security GRC Analyst

Fdetimes; Bellevue (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a technically strong Security Governance professional to bridge security and compliance requirements with Engineering implementation across the enterprise. You will be the technical voice of Assurance, partnering with Engineering, Legal, Product Security and other stakeholders to translate governance into practical, scalable controls.

You will evaluate control design, operate controls at scale, and help leadership monitor risk, M&A due diligence, and emerging AI governance

Qualifications

• Experience in translating security, risk, regulatory or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks (NIST, ISO 27001, SOC, SOX, FedRAMP).
• Ability to understand complex systems, architectures, APIs, infrastructure and cloud environments.
• Ability to work with Engineering while partnering with Legal, Compliance, Security, Risk and business stakeholders.
• Excellent communication skills to translate governance into actionable language for Engineering teams.
• Experience with independent control testing, assurance or audit practices, incident/root-cause analysis or M&A due diligence is a plus.

Responsibilities

• Support Assurance and Engineering Alignment - act as a liaison between Assurance, Engineering, Product Security, Legal and other stakeholders to ensure governance requirements are understood and actionable.
• Evaluate Control Implementation - work with Engineering to understand how security and compliance controls are implemented in applications, platforms, infrastructure, cloud environments, and workflows.
• Create the Engineering Feedback Loop - assess what works and where controls are unclear; feed insights back into control design, standards and governance processes.
• Make Requirements Engineer-Usable - translate regulatory and security expectations into clear technical requirements for Engineering teams to implement and validate.
• Develop Second-Line Oversight - execute oversight protocols to monitor and validate that all security controls are operational across engineering teams (attestations, CRE checks).
• Understand Systems End-to-End - develop deep knowledge of platforms, architectures, processes, security capabilities and controls to help Assurance make risk decisions.
• Assess Risk in M&A - assess control and risk exposure during M&A; design assessments and activation plans tied to risk models.
• Partner on Emerging Security Requirements - collaborate with Product Security, Legal, and other teams on new requirements and translate into future controls.
• Track the Direction of Compliance Frameworks - monitor regulatory trends including AI governance and international requirements; identify implications for the organization.
• Support Enablement and Change Management - contribute to documentation and training to help engineering teams comply with policies and standards.
• Support Control Incident Response - participate in incident reviews and root-cause analysis; track remediation for control failures.
• Contribute to Control Refinement - provide feedback on control effectiveness and suggest updates based on findings.
• Engage Security Champions - work with security champions across Engineering to gather feedback and support governance adoption.
• Support Leadership Reporting - help track metrics on control coverage, compliance trends and risk items for management reporting.
• Represent Assurance Requirements - act as the point of contact for Assurance in engineering discussions to integrate compliance early in development cycles.

Skills

Security engineering

Cloud security

Product security

IAM

Platform engineering

IT governance

Job description

Salesforce is seeking a technically strong Security Governance professional to bridge security and compliance requirements with Engineering implementation across the enterprise. You will be the technical voice of Assurance, partnering with Engineering, Legal, Product Security and other stakeholders to translate governance into practical, scalable controls.

You will evaluate control design, operate controls at scale, and help leadership monitor risk, M&A due diligence, and emerging AI governance