Security Governance Lead - Forward-Deployed Assurance

Fdetimes; Bellevue (WA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce is seeking a technically strong Security Governance professional who can bridge the gap between Security & Compliance requirements and Engineering implementation. This role will serve as the technical voice and face of Assurance, partnering with Engineering, Legal, and other stakeholders to translate security and regulatory expectations into actionable technical requirements.

Success means turning governance needs into practical controls adopted across the engineering lifecycle, with

Qualifications

• U.S. Citizenship or Permanent Residency required; visa sponsorship not available.
• 5–6 years of relevant experience or technical background in security engineering, cloud security, product security, IAM, platform engineering, or IT governance.
• Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes.
• Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.
• Familiarity with AI security, AI governance, privacy, and evolving global technology regulations.
• Ability to work effectively with Engineering while also partnering with Legal, Compliance, Security, Risk, and business stakeholders.
• Strong communication skills, with the ability to explain technical implementation details to governance teams and translate governance expectations into language Engineering teams can act on.
• Ability to challenge existing requirements constructively and recommend improvements based on technical realities and risk.

Responsibilities

• Bridge Assurance and Engineering - technical liaison ensuring governance requirements are feasible and implementable.
• Evaluate Control Implementation - understand security and compliance controls in apps, platforms, and cloud environments.
• Create the Engineering Feedback Loop - assess friction and clarify controls or requirements.
• Make Requirements Engineer-Usable - translate regulatory and security expectations into actionable requirements.
• Develop Second-Line Oversight - establish protocols to monitor and attest control operation.
• Understand Systems End-to-End - gain deep understanding of platforms and architectures to aid risk decisions.
• Track the Direction of Compliance Frameworks - monitor AI governance and evolving regulatory expectations.
• Drive Change Management and Enablement - shift teams to precise applicability and compliance steps.
• Run Control Incident Management - stand up incident management for control failures with postmortems and root-cause analysis.
• Influence Future Control Design - evolve controls with new tech and lessons learned.
• Drive Security Champion Engagement - build relationships with engineering stakeholders for feedback and scaling.
• Report to Executive Leadership - communicate control reliability and risk trends.
• Represent Assurance Across Technical Organizations - be a trusted tech voice in governance discussions.

Skills

Security governance

Cloud security

Product security

IAM

Platform engineering

IT governance

Job description

Salesforce is seeking a technically strong Security Governance professional who can bridge the gap between Security & Compliance requirements and Engineering implementation. This role will serve as the technical voice and face of Assurance, partnering with Engineering, Legal, and other stakeholders to translate security and regulatory expectations into actionable technical requirements.

Success means turning governance needs into practical controls adopted across the engineering lifecycle, with