Senior Cloud Compliance & GRC Analyst

salesforce; Bellevue (KY); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce’s Global Compliance and Certification (GCC) team seeks a seasoned cloud compliance professional to translate complex regulatory requirements into actionable controls and enable audits across SaaS environments.

You will work with engineering, security, and external auditors to strengthen Salesforce’s global compliance posture, emphasizing cloud security frameworks and scalable audit processes.

Qualifications

• 4+ years of IT audit or internal controls experience in global environments.
• Experience with ISO 27001, SOC, HIPAA, PCI, HITRUST, SOX, and FedRAMP.
• Strong analytical, risk assessment, and independent work in regulatory settings.
• Excellent program and stakeholder management with cross-functional leadership.

Responsibilities

• Serve as cloud compliance SME and support audits with external assessors by ensuring effective control implementation across Salesforce environments aligned with ISO 27001, SOC 1/2, and other regulatory frameworks.
• Partner with engineering teams to translate complex compliance frameworks into clear deliverables, ensuring timely remediation and leadership reporting on progress and residual risk.
• Identify opportunities to streamline evidence collection and document detailed process playbooks, driving operational efficiency.
• Collaborate with cross-functional partners to operationalize audit recommendations and enhance overall compliance posture.
• Automate evidence collection and compliance operations to drive efficiency and continuous improvement.

Skills

IT audit

Regulatory standards

Cloud security

Program management

Stakeholder management

Tools

Compliance tooling

Audit workflow platforms

AWS

Job description

Salesforce’s Global Compliance and Certification (GCC) team seeks a seasoned cloud compliance professional to translate complex regulatory requirements into actionable controls and enable audits across SaaS environments.

You will work with engineering, security, and external auditors to strengthen Salesforce’s global compliance posture, emphasizing cloud security frameworks and scalable audit processes.