Security Governance Engineer: Policy & Controls

Salesforce, Inc.

Washington

On-site

USD 130,000 - 190,000

Full time

6 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and regulatory requirements into measurable controls.

You will build a governance framework, manage policy lifecycles, and shepherd control ownership across IAM, Cloud, and Data Security domains. You’ll collaborate with Security Engineering, Product Security, Cloud Security, Compliance, Risk, Audit, Legal, and business teams to embed governance into engineering workflows and ensure continuous control

Qualifications

2+ years in information security governance, security engineering, technology risk, or related functions.
Strong grasp of security policies, standards, control frameworks, and governance processes.
Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
Ability to turn regulatory and security requirements into measurable control objectives.
Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
Understanding of control design (preventive and detective), risk assessment, and exception management.

Responsibilities

Policy and standards: Develop and maintain security policies, standards, and control requirements.
Governance-as-Code / Policy-as-Code: Define machine-readable policy requirements and collaborate with engineering.
Control framework: Maintain a common framework with clear objectives and validation criteria.
Control family ownership: Serve as SME and point of contact for domains.
Collaboration: Work with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.