Senior Cloud Compliance & Security GRC Analyst

Salesforce; Washington; On-site; USD 120,000 - 170,000; Full time

Job summary

Salesforce is seeking a seasoned cloud compliance professional to join the Global Compliance and Certification (GCC) team. You will partner with engineering to translate regulatory mandates into actionable controls and drive risk mitigation across Salesforce environments.

In this role, you will work with external auditors, translate frameworks into deliverables, and lead efforts to automate evidence collection and improve overall compliance posture in a fast-paced cloud-centric environment.

Qualifications

• 4+ years of IT audit or internal controls experience.
• Experience with compliance standards across industries and geographies (ISO 27001, SOC, HIPAA, PCI, HITRUST, SOX, FedRAMP).
• Strong analytical and problem-solving skills with independent work style.

Responsibilities

• Serve as cloud compliance SME, supporting audits and guiding control implementation across Salesforce environments for regulatory frameworks.
• Translate complex mandates into actionable deliverables and provide leadership reporting on progress and residual risk.
• Identify opportunities to automate evidence collection and document process playbooks to improve efficiency.
• Collaborate with cross-functional partners to operationalize audit recommendations and enhance compliance posture.
• Automate evidence collection and compliance operations to drive efficiency.

Skills

IT Audit

Internal Controls

Cloud/SaaS

ISO 27001

SOC

HIPAA

PCI

HITRUST

SOX

FedRAMP

Stakeholder Management

Analytical Thinking

Tools

Compliance tooling

Audit workflow platforms

AWS

Job description

Salesforce is seeking a seasoned cloud compliance professional to join the Global Compliance and Certification (GCC) team. You will partner with engineering to translate regulatory mandates into actionable controls and drive risk mitigation across Salesforce environments.

In this role, you will work with external auditors, translate frameworks into deliverables, and lead efforts to automate evidence collection and improve overall compliance posture in a fast-paced cloud-centric environment.