Security Governance Architect | Policy & Controls

Salesforce, Inc.; Seattle (WA); On-site; USD 149,000 - 246,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to turn security policies and regulatory requirements into actionable controls. You’ll develop a governance framework, maintain policy standards, and collaborate across Security Engineering, Product Security, and Compliance teams to embed governance into engineering workflows.

The role emphasizes policy ownership, domain SME responsibilities, and continuous improvement of control effectiveness within Salesforce’s Assurance practice.

Qualifications

• Translate enterprise security policies, regulatory requirements, and risk expectations into measurable, technically actionable controls.
• Grow into a Security Control Family Owner for domains such as IAM, Cloud, Application Security, Cryptography, Data Protection, or Infrastructure Security.
• Collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Responsibilities

• Develop and maintain security policies, technical standards, and control requirements.
• Manage the policy lifecycle: versioning, approvals, exceptions, reviews, and change management.
• Define structured, machine-readable policy and control requirements and validate with engineering teams.
• Establish a governance framework integrated into engineering workflows and CI/CD processes.
• Act as SME for assigned domains and drive improvements in risk management.

Skills

Governance expertise

Policy design

Regulatory compliance

Security controls

Tools

OPA/Rego

HashiCorp Sentinel

Git

YAML

JSON

Job description

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to turn security policies and regulatory requirements into actionable controls. You’ll develop a governance framework, maintain policy standards, and collaborate across Security Engineering, Product Security, and Compliance teams to embed governance into engineering workflows.

The role emphasizes policy ownership, domain SME responsibilities, and continuous improvement of control effectiveness within Salesforce’s Assurance practice.