Hybrid Cyber Risk Operations Lead

Salesforce, Inc.; Bellevue (WA); Hybrid; USD 173,000 - 260,000; Full time

Benefits offered by this job

Time off

Medical

Dental

Vision

Mental health support

Parental leave

401(k)

Stock purchase program

Job summary

Salesforce, Inc. is seeking an experienced Risk Operations professional to identify, prioritize, and manage cybersecurity risk within the Assurance organization. This role collaborates with security, engineering, and business partners to drive timely decisions and scalable risk workflows.

Based in Bellevue, WA or McLean, VA with a hybrid work arrangement, you will own risk initiatives, improve governance, and deliver metrics that show risk exposure and remediation progress.

Qualifications

• 8+ years in governance, risk, and compliance (GRC) or security risk management.
• Experience leading cross-functional projects.
• Strong knowledge of risk assessments, policy exceptions, remediation and governance.
• Familiar with NIST, ISO 27001, SOC, SOX, FedRAMP.
• Experience turning security requirements into technical implementations.

Responsibilities

• Lead rapid risk decisions by coordinating timely reviews and escalations.
• Drive cross-functional projects, managing priorities and deliverables.
• Own and improve risk workflows, including remediation and governance.
• Partner with security, engineering, compliance, and business teams to align priorities.
• Build scalable processes, operating standards, and escalation paths.
• Define and improve metrics, dashboards, and leadership reports.

Skills

GRC governance

Risk management

Security compliance

Cross-functional leadership

Policy development

Tools

GRC platforms

Job description

Salesforce, Inc. is seeking an experienced Risk Operations professional to identify, prioritize, and manage cybersecurity risk within the Assurance organization. This role collaborates with security, engineering, and business partners to drive timely decisions and scalable risk workflows.

Based in Bellevue, WA or McLean, VA with a hybrid work arrangement, you will own risk initiatives, improve governance, and deliver metrics that show risk exposure and remediation progress.