Senior GRC Policy Operations Lead

Salesforce, Inc.; Virginia, Northern (MN, KY); Hybrid; USD 117,000 - 177,000; Full time

Benefits offered by this job

Accommodations available

Job summary

Salesforce, Inc. in the US seeks a Sr. GRC Analyst to drive policy operations for the Security Governance team.

You will triage standards, draft with SMEs, and manage end-to-end reviews across security, compliance and engineering. You’ll publish to eGRC, track ownership, and monitor health dashboards to ensure regulatory alignment and timely attestations. The role emphasizes independent work across multiple parallel workstreams, with strong written communication and a focus on risk-based

Qualifications

• 3+ years in security governance, GRC, or compliance operations at a software company.
• Direct security-domain experience readControls, understand risk, challenge drafts.
• Ability to write clear standards/policies for non-security readers.

Responsibilities

• Triage intake for new/updated standards, assign owners and timelines.
• Draft standards with SMEs in plain, unambiguous language.
• Own end-to-end review cycle, schedule CAB reviews and track decisions.
• Publish standards to eGRC and retire superseded docs.
• Maintain ownership maps, flag drift and drive re-attestations.
• Build dashboards on standards health and adoption signals.
• Onboard new standards driven by high-priority initiatives.
• Coordinate stakeholder communications and update changelogs.

Skills

Security governance

GRC

Technical writing

Program management

Stakeholder management

Git

OSCAl

Markdown

eGRC platforms

Tools

Git

OSCAl

Markdown

Salesforce eGRC

ServiceNow GRC

Archer

Job description

Salesforce, Inc. in the US seeks a Sr. GRC Analyst to drive policy operations for the Security Governance team.

You will triage standards, draft with SMEs, and manage end-to-end reviews across security, compliance and engineering. You’ll publish to eGRC, track ownership, and monitor health dashboards to ensure regulatory alignment and timely attestations. The role emphasizes independent work across multiple parallel workstreams, with strong written communication and a focus on risk-based