Senior GRC Analyst, Common Controls — Hybrid

Salesforce, Inc.; Virginia, Northern (MN, KY); Hybrid; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. GRC Analyst to support the Common Controls Framework (CCF) within our security governance program.

You’ll map controls to security standards, maintain lifecycle descriptions, and streamline certification readiness across Salesforce programs. You will collaborate with Engineering, Legal, Privacy, and Product teams, analyzing requirements and driving improvements in CCF processes using responsible AI tools when appropriate.

Qualifications

• 3+ years in security governance, GRC, or compliance operations at a tech company.
• Ability to read controls, understand risk, and challenge a draft.
• Excellent writing: clear standards, policies, or procedures for non-security readers.

Responsibilities

• Support design, maintenance, and evolution of the Common Controls Framework (CCF) across Salesforce certification programs.
• Map controls to applicable frameworks, standards, and requirements; identify reuse opportunities across programs.
• Maintain and update controls throughout their lifecycle with descriptions, mappings, and implementation guidance.
• Analyze requirements, assess control coverage, and streamline assessment processes and timelines for certifications.
• Collaborate cross-functionally to adopt and implement CCF; research regulations and standards for impact on CCF.
• Identify and implement opportunities to standardize and increase efficiency in controls and processes.
• Develop and maintain reporting, metrics, and analyses on CCF adoption and certification readiness.

Skills

Security governance

GRC

Technical writing

Program management

Compliance operations

Cross-functional collaboration

Tools

Salesforce eGRC

ServiceNow GRC

Archer

OneTrust

LogicGate

Job description

Salesforce, Inc. is seeking a Sr. GRC Analyst to support the Common Controls Framework (CCF) within our security governance program.

You’ll map controls to security standards, maintain lifecycle descriptions, and streamline certification readiness across Salesforce programs. You will collaborate with Engineering, Legal, Privacy, and Product teams, analyzing requirements and driving improvements in CCF processes using responsible AI tools when appropriate.