Senior GRC Analyst: Common Controls Framework

Leadout Capital; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Salesforce is seeking an Analyst to support day-to-day Common Controls Framework (CCF) operations. You will bring security, GRC, and operational/product-management expertise to advise security and compliance stakeholders across the business.

This role involves mapping controls to frameworks, maintaining control lifecycle, and driving efficiency through standardized processes. You will partner with Engineering, Legal, Privacy, and Product teams while exploring AI-assisted tooling to enhance

Qualifications

• 3+ years in security governance, GRC, technical writing, program management, or compliance operations at a tech company.

Responsibilities

• Support the design, maintenance, and evolution of the CCF and its implementation across all Salesforce compliance certification programs.
• Map controls to frameworks and requirements, identifying reuse opportunities across programs.
• Maintain and update controls, descriptions, mappings, applicability, and implementation guidance.
• Support certification programs by analyzing requirements and streamlining assessment processes.
• Partner cross-functionally to support CCF adoption and implementation.
• Research emerging regulations and standards for potential impact on the CCF.
• Develop and maintain reporting, metrics, and analyses on CCF adoption and compliance readiness.
• Stay informed on regulatory trends and share updates with the team.

Skills

Security governance

GRC

Technical writing

Program management

Compliance operations

English communication

Independent working

Cross-functional collaboration

Tools

Salesforce eGRC

ServiceNow GRC

Archer

OneTrust

LogicGate

Job description

Salesforce is seeking an Analyst to support day-to-day Common Controls Framework (CCF) operations. You will bring security, GRC, and operational/product-management expertise to advise security and compliance stakeholders across the business.

This role involves mapping controls to frameworks, maintaining control lifecycle, and driving efficiency through standardized processes. You will partner with Engineering, Legal, Privacy, and Product teams while exploring AI-assisted tooling to enhance