Security Governance Lead for Engineering

Salesforce, Inc.; San Francisco (CA); Hybrid; USD 149,000 - 224,000; Full time

Benefits offered by this job

401(k) matching

Health & dental benefits

Time off programs

Equity

Job summary

Salesforce, Inc. is seeking a technically strong Security Governance professional to bridge Security & Compliance with Engineering implementations.

You will partner with Engineering, Product Security, Legal, and other stakeholders to translate governance requirements into practical, scalable controls across systems. You will design second-line oversight, assess risk during M&A, and evolve controls with new technologies and regulatory expectations, while building a wide security champion network

Qualifications

• Strong technical background in security engineering, cloud security, product security, IAM, platform engineering, or security architecture.
• Ability to translate security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Experience with independent control testing, assurance, or audit practices is a plus.

Responsibilities

• Bridge Assurance and Engineering by serving as a technical liaison, ensuring governance requirements are feasible and implementable.
• Evaluate how security and compliance controls are implemented within applications, platforms, and cloud environments.
• Create the Engineering Feedback Loop to refine control design, standards, and governance processes.

Skills

Security engineering

Cloud security

Product security

IAM

Platform engineering

Security architecture

Regulatory requirements translation

Tools

AWS

Cloud environments

Job description

Salesforce, Inc. is seeking a technically strong Security Governance professional to bridge Security & Compliance with Engineering implementations.

You will partner with Engineering, Product Security, Legal, and other stakeholders to translate governance requirements into practical, scalable controls across systems. You will design second-line oversight, assess risk during M&A, and evolve controls with new technologies and regulatory expectations, while building a wide security champion network