Security GRC Senior Analyst

Salesforce, Inc.; United States; On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a security compliance professional for a role focused on government cloud environments in the United States. You will own responsibilities with minimal guidance, advise on security requirements, and drive automation to improve delivery.

The role requires at least 4 years in information security, familiarity with FedRAMP and DoD SRG, and strong collaboration with business, legal, and engineering partners. U.S.

Qualifications

• 4+ years of experience in information security, cybersecurity, accreditation, and related areas
• Experience with Government Cloud environments (AWS, Azure, GCP) and security tooling
• Experience in security analyses, metrics, dashboards, and reporting
• Ability to translate between business and technical teams and build partnerships
• Excellent written and verbal communication skills and ability to communicate results to management
• Knowledge of security frameworks (FedRAMP20x, DoD SRG) and compliance principles
• Demonstrated willingness to learn new skills and innovate
• Agile, proactive, and able to prioritize in ambiguous environments
• Strong interpersonal, relationship, and organizational skills
• Drive improvements in processes and design automated, efficient solutions
• Experience collaborating with operations, security, engineering, and auditors
• Experience working with Authorizing Officials in Federal Civilian agencies (DoD)**

Responsibilities

• Drive initiatives across stakeholder organizations to create synergies and reduce compliance risk
• Support change management activities with federal authorization bodies
• Support security pillars in Salesforce Government Cloud Division including monitoring, advisory, incident response, AI adoption, and security docs
• Consult with business or security stakeholders on information security requirements
• Build relationships with key business, legal, Employee Success, Internal Audit, engineering stakeholders
• Improve operational processes and design innovative automated solutions for efficiency
• Communicate accreditation positions and programs to stakeholders

Skills

Information security

Stakeholder management

Communication

Agile

Analytical skills

Problem solving

Tools

AWS

Azure

GCP

Job description

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts. Job Category Enterprise Technology & Infrastructure Job Details About Salesforce Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. Overview of the Role: In this role, you’re expected to own the area of responsibility with minimal guidance from senior team members. You should innovate, challenge the status quo, embrace operational excellence best practices and use automation and emerging technologies to enhance delivery of your work product. Additionally, accountable for advising business partners on adopting new security requirements. This candidate must be a U.S. citizen (U.S. born or naturalized) operating on U.S. Soil who does not hold dual citizenship with the ability to meet customer and government screening standards applicable to this role.

Responsibilities

• Drive existing or newly identified initiatives between stakeholder organizations creating synergies and reducing risk of non-compliance with internal or external requirements
• Support change management activities with federal authorization bodies
• Support multiple security pillars within Salesforce Government Cloud Division including but not limited to, continuous monitoring activities, advisory, incident response, adoption of AI, and security documentation
• Consult with business or security stakeholders on information security requirements and applicability to their business processes, products, or services
• Create and maintain relationships with key business, legal, Employee Success, Internal Audit, technical/engineering stakeholders, and other organizations throughout the company who provide expertise in security requirements and solution management
• Focus on continuous improvement of operational processes and designing innovative and automated functionality for added efficiency
• Effectively communicate accreditation positions and programs to applicable business stakeholders

Required Qualifications

• Minimum 4 years of experience in information security, cybersecurity, accreditation, and other security related areas
• Experience working with Government Cloud environments such as AWS, Azure, GCP (SaaS, IaaS, PaaS etc)
• Experience in security related analysis, creating metrics and dashboards and summarizing large data sets
• Ability to work with both business and technical areas and translate between the two areas
• Skilled at building rapport and establishing partnerships
• Excellent verbal and written communication skills and ability to communicate results to multiple levels of management
• Knowledge security frameworks (FedRAMP20x, DoD SRG)
• Demonstrated desire to learn new skills and innovate
• Agile, proactive, comfortable working with ambiguous specifications and can prioritize quickly and effectively
• Excellent interpersonal, relationship, and organizational skills
• Excellent analytical and process development skills
• Detail oriented with an eye for quality
• Drive improvements in existing processes and develop new innovative and efficient solutions
• Ability to work effectively with a wide range of individuals including developers, systems administrators, executives, customers, regulators, auditors, etc.
• Experience building productive relationships with Technical Operations, Security Operations, Incident Response, Technical Compliance, Engineering, and other stakeholders
• Experience working directly with Authorizing Officials in Federal Civilian agencies, including the Department of Defense (DoD), specifically the DISA Cloud Assessment Division.
• Proven experience in Compliance Engineering

Preferred Qualifications

• Operationalized AI automation strategies
• CISSP, CISA, CISM, AWS or similar certifications a plus
• Coding or scripting experience
• Experience leveraging AI to help facilitate day-to-day tasks.
• Understanding of FedRAMP 20x standards and requirements.
• Compliance engineering experience (e.g., developing tools, processes or requirements to facilitate compliance related work).

This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life.

Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love.

Accommodations

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form.

Posting Statement

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination.

Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law.

This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits.

• time off programs
• medical
• dental
• vision
• mental health support
• paid parental leave
• life and disability insurance
• 401(k)
• an employee stock purchasing program

More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.

At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.

The typical base salary range for this position is $117,200 - $176,700 annually. The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable.

We're Salesforce, the Customer Company, inspiring the future of business with AI + Data + CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world.

If you believe in business as the greatest platform for change and in companies doing well and doing good – you've come to the right place.