Security Governance Engineer — Policy & Controls

Salesforce, Inc.; Atlanta (GA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and risk expectations into measurable controls.

You will help define a governance framework, document standards, and embed policy ownership into engineering workflows. You’ll become a domain SME for IAM, Cloud, and data security within a collaborative security organization. You’ll work with Security Engineering, Product Security, Compliance, Legal, and other teams to align controls with regulations and

Qualifications

• U.S. Citizenship or Permanent Residency required.
• 2+ years in information security governance, security engineering, technology risk, or related functions
• Strong grasp of security policies, standards, control frameworks, and governance processes
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS
• Ability to turn regulatory and security requirements into measurable control objectives
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security
• Understanding of control design (preventive and detective), risk assessment, and exception management
• Familiarity with modern development practices, cloud environments, and CI/CD
• Strong analytical, communication, documentation, and stakeholder-management skills

Responsibilities

• Translate enterprise security policies, regulatory requirements into measurable, actionable controls.
• Help build a governance framework where policies are version-controlled, validated, and integrated into engineering workflows.
• Grow into a Security Control Family Owner for domains such as IAM, Cloud, Application Security, Data Protection, or Infrastructure Security.
• Collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Skills

InfoSec governance

Security engineering

Policy development

Cloud security

CI/CD familiarity

Risk management

Documentation

Tools

OPA/Rego

HashiCorp Sentinel

GRC platforms

Job description

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and risk expectations into measurable controls.

You will help define a governance framework, document standards, and embed policy ownership into engineering workflows. You’ll become a domain SME for IAM, Cloud, and data security within a collaborative security organization. You’ll work with Security Engineering, Product Security, Compliance, Legal, and other teams to align controls with regulations and