Senior GRC Security Analyst – Federal Cloud & Compliance

Salesforce, Inc.; United States; On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a security compliance professional for a role focused on government cloud environments in the United States. You will own responsibilities with minimal guidance, advise on security requirements, and drive automation to improve delivery.

The role requires at least 4 years in information security, familiarity with FedRAMP and DoD SRG, and strong collaboration with business, legal, and engineering partners. U.S.

Qualifications

• 4+ years of experience in information security, cybersecurity, accreditation, and related areas
• Experience with Government Cloud environments (AWS, Azure, GCP) and security tooling
• Experience in security analyses, metrics, dashboards, and reporting
• Ability to translate between business and technical teams and build partnerships
• Excellent written and verbal communication skills and ability to communicate results to management
• Knowledge of security frameworks (FedRAMP20x, DoD SRG) and compliance principles
• Demonstrated willingness to learn new skills and innovate
• Agile, proactive, and able to prioritize in ambiguous environments
• Strong interpersonal, relationship, and organizational skills
• Drive improvements in processes and design automated, efficient solutions
• Experience collaborating with operations, security, engineering, and auditors
• Experience working with Authorizing Officials in Federal Civilian agencies (DoD)**

Responsibilities

• Drive initiatives across stakeholder organizations to create synergies and reduce compliance risk
• Support change management activities with federal authorization bodies
• Support security pillars in Salesforce Government Cloud Division including monitoring, advisory, incident response, AI adoption, and security docs
• Consult with business or security stakeholders on information security requirements
• Build relationships with key business, legal, Employee Success, Internal Audit, engineering stakeholders
• Improve operational processes and design innovative automated solutions for efficiency
• Communicate accreditation positions and programs to stakeholders

Skills

Information security

Stakeholder management

Communication

Agile

Analytical skills

Problem solving

Tools

AWS

Azure

GCP

Job description

Salesforce is seeking a security compliance professional for a role focused on government cloud environments in the United States. You will own responsibilities with minimal guidance, advise on security requirements, and drive automation to improve delivery.

The role requires at least 4 years in information security, familiarity with FedRAMP and DoD SRG, and strong collaboration with business, legal, and engineering partners. U.S.