Security GRC Lead for Engineering Governance

Salesforce, Inc.; Bellevue (WA); On-site; USD 149,000 - 246,000; Full time

Job summary

Salesforce, Inc. seeks a Security Governance professional to bridge Assurance with Engineering, translating security and regulatory needs into concrete technical requirements and scalable controls across systems and cloud environments.

The role partners with Legal, Product Security, and engineering to develop oversight, manage risk, and drive governance improvements that protect enterprise-scale platforms and data.

Qualifications

• Strong technical background in security engineering, cloud security, product security, IAM, platform engineering, or security architecture.
• Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.
• Familiarity with AI security, AI governance, privacy, and evolving global technology regulations.
• Ability to work with Engineering while partnering with Legal, Compliance, Security, Risk, and business stakeholders.
• Strong communication skills to explain technical implementation details to governance teams.

Responsibilities

• Bridge Assurance and Engineering - serve as a technical liaison to ensure governance requirements are feasible and implementable.
• Evaluate Control Implementation - work with Engineering to understand how security controls are implemented across apps, platforms, and cloud environments.
• Create the Engineering Feedback Loop - assess friction and unclear requirements, feeding insights back into design and governance processes.
• Make Requirements Engineer-Usable - translate expectations into actionable technical requirements.
• Develop Second-Line Oversight - establish protocols to monitor and audit controls across engineering teams.
• Understand Systems End-to-End - develop deep understanding of platforms and architectures to inform risk decisions.
• Assess Risk in M&A - design assessments to price risk and deliver activation plans.
• Partner on Emerging Security Requirements - translate new requirements into future controls.
• Track the Direction of Compliance Frameworks - monitor AI governance and regulatory trends globally.
• Drive Change Management and Enablement - shift teams to know precisely what applies for compliance.
• Run Control Incident Management - stand up incident management for control failures with postmortems and root-cause analysis.
• Influence Future Control Design - evolve controls with new tech and lessons learned.
• Drive Security Champion Engagement - build a network of security champions across engineering.
• Report to Executive Leadership - provide visibility into control reliability and risk trends.
• Represent Assurance Across Technical Organizations - act as a trusted technical representative in architecture and governance discussions.

Skills

Security engineering

Cloud security

Product security

IAM

Platform engineering

Security architecture

AI security

AI governance

Privacy

Regulatory requirements

Security controls

Cross-functional collaboration

Communication skills

Job description

Salesforce, Inc. seeks a Security Governance professional to bridge Assurance with Engineering, translating security and regulatory needs into concrete technical requirements and scalable controls across systems and cloud environments.

The role partners with Legal, Product Security, and engineering to develop oversight, manage risk, and drive governance improvements that protect enterprise-scale platforms and data.