Security Governance Engineer — Policy, Controls & GRC

Salesforce, Inc.; Bellevue (WA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. seeks a Senior Security Governance Engineer to translate enterprise security policies into measurable, technically actionable controls. You will help build a governance framework across IAM, Cloud, Application Security, Cryptography, Data Protection, or Infrastructure Security.

The focus is governance and policy ownership, not hands-on software development. You will drive policy lifecycle, versioning, compliance alignment, and collaboration across Security Engineering, Product

Qualifications

• 2+ years in information security governance, security engineering, technology risk, or related functions
• Strong grasp of security policies, standards, control frameworks, and governance processes
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS
• Ability to turn regulatory and security requirements into measurable control objectives
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application security, infrastructure security
• Understanding of control design (preventive and detective), risk assessment, and exception management
• Familiarity with modern development practices, cloud environments, and CI/CD
• Strong analytical, communication, documentation, and stakeholder-management skills

Responsibilities

• Policy and standards: Develop and maintain security policies, technical standards, and control requirements.
• Governance-as-Code / Policy-as-Code: Define structured, machine-readable policy and control requirements.
• Control framework: Maintain a common control framework with clear objectives, ownership, and validation criteria.
• Control family ownership: Act as the SME and point of contact for assigned domains; interpret regulations, assess gaps, exceptions, and risks.
• Collaboration: Work with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Skills

Security governance

Policy management

Cloud security

Risk assessment

CI/CD / DevSecOps

Stakeholder management

Tools

OPA/Rego

HashiCorp Sentinel

GRC platforms

Job description

Salesforce, Inc. seeks a Senior Security Governance Engineer to translate enterprise security policies into measurable, technically actionable controls. You will help build a governance framework across IAM, Cloud, Application Security, Cryptography, Data Protection, or Infrastructure Security.

The focus is governance and policy ownership, not hands-on software development. You will drive policy lifecycle, versioning, compliance alignment, and collaboration across Security Engineering, Product