Security GRC Lead — Engineering & Compliance

Salesforce, Inc.; Washington; On-site; USD 120,000 - 180,000; Full time

Job summary

Salesforce, Inc. in Washington is seeking a technically adept Security Governance professional to bridge governance requirements with engineering implementation.

You will partner with Engineering, Product Security, Legal, and other stakeholders to translate security and compliance needs into practical controls across systems. You will evaluate how controls are designed, implemented, operated, and scaled, and help shape governance practices across the enterprise while staying aligned with

Qualifications

• U.S. Citizenship or Permanent Residency required.

Responsibilities

• Support Assurance and Engineering Alignment - coordinate governance requirements with Assurance, Engineering, Product Security, Legal, and other stakeholders to ensure requirements are actionable.
• Evaluate Control Implementation - work with Engineering teams to understand how security and compliance controls are implemented across apps, platforms, infra, and cloud environments.
• Create the Engineering Feedback Loop - assess performance and friction; feed insights back into control design, standards, and governance processes.
• Make Requirements Engineer-Usable - translate regulatory and security expectations into clear technical requirements for Engineering teams to implement and validate.
• Develop Second-Line Oversight - execute oversight protocols to monitor and attest that security controls are operational across teams.
• Understand Systems End-to-End - develop deep understanding of key platforms, architectures, and security capabilities to inform risk decisions.
• Assess Risk in M&A - design assessments to price risk and align activation plans with risk models.
• Partner on Emerging Security Requirements - collaborate to translate into future security controls and engineering expectations.
• Track the Direction of Compliance Frameworks - monitor regulatory trends and implications for the organization.
• Support Enablement and Change Management - contribute to documentation and training for compliance in development cycles.
• Support Control Incident Response - participate in incident reviews and root-cause analysis for control failures.
• Contribute to Control Refinement - provide feedback on control effectiveness and suggest updates.
• Engage Security Champions - work with champions to share guidance and adoption.
• Support Leadership Reporting - help track metrics on control coverage and risk items.
• Represent Assurance Requirements - be a point of contact for Assurance in engineering discussions.

Job description

Salesforce, Inc. in Washington is seeking a technically adept Security Governance professional to bridge governance requirements with engineering implementation.

You will partner with Engineering, Product Security, Legal, and other stakeholders to translate security and compliance needs into practical controls across systems. You will evaluate how controls are designed, implemented, operated, and scaled, and help shape governance practices across the enterprise while staying aligned with