Security Governance Engineer: Policy & Controls (Equity)

Salesforce, Inc.; Atlanta (GA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate enterprise security policies into measurable, actionable controls and to build a governance framework integrated into engineering workflows.

You will evolve into a Security Control Family Owner for domains like IAM, Cloud, and data security, focusing on governance, control design, and policy ownership rather than hands-on software development.

Qualifications

• 2+ years in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to turn regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.
• Familiarity with modern development practices, cloud environments, and CI/CD.
• Strong analytical, communication, documentation, and stakeholder-management skills.

Responsibilities

• Translate enterprise security policies, regulatory requirements, and risk expectations into measurable, technically actionable controls.
• Help build a governance framework where policies and standards are version-controlled, validated, and integrated into engineering workflows.
• Grow into a Security Control Family Owner for domains such as IAM, Cloud, Application Security, Cryptography, Data Protection, or Infrastructure Security.
• Develop and maintain security policies, technical standards, and control requirements; manage the policy lifecycle.
• Define and implement Policy-as-Code and collaborate with engineering to turn them into guardrails and validation criteria.

Skills

Security governance

Policy development

Cloud security

Regulatory requirements

Stakeholder management

Job description

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate enterprise security policies into measurable, actionable controls and to build a governance framework integrated into engineering workflows.

You will evolve into a Security Control Family Owner for domains like IAM, Cloud, and data security, focusing on governance, control design, and policy ownership rather than hands-on software development.