GRC Security Analyst — Unified Audit Lead

Salesforce; San Francisco (CA); On-site; USD 96,300 - 145,200; Full time

Job summary

Salesforce is seeking a Security GRC Analyst to own the Unified Audit program across SOC 2, HIPAA, ISO 27001, and GxP. You will coordinate internal evidence collection, manage control owners, and serve as the main liaison with external auditors to ensure audit readiness.

You will maintain dashboards, SOPs, and documentation to support ongoing compliance. This role requires 2–4 years in GRC and familiarity with major frameworks and tools.

Qualifications

• 2–4 years of experience in GRC, compliance, audit, or information security.
• Hands-on experience supporting or managing compliance audits.
• Knowledge of at least two of SOC 2, HIPAA, ISO 27001, or GxP frameworks.

Responsibilities

• Lead end-to-end Unified Audit program across SOC 2, HIPAA, ISO 27001, and GxP.
• Coordinate schedules, verify submissions, and conduct pre-audit gap reviews.
• Liaise with external auditors and coordinate responses to findings.
• Maintain compliance dashboards and documentation repositories.

Skills

GRC

Compliance

Audit

Information security

Education

CISA certification

CRISC certification

CISSP

Tools

GRC tools

Audit management platforms

Office 365 / Google Workspace

Job description

Salesforce is seeking a Security GRC Analyst to own the Unified Audit program across SOC 2, HIPAA, ISO 27001, and GxP. You will coordinate internal evidence collection, manage control owners, and serve as the main liaison with external auditors to ensure audit readiness.

You will maintain dashboards, SOPs, and documentation to support ongoing compliance. This role requires 2–4 years in GRC and familiarity with major frameworks and tools.