Senior Security Governance Architect

Salesforce, Inc.; San Francisco (CA); On-site; USD 149,000 - 224,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and regulatory requirements into measurable controls.

The role grows into a Security Control Family Owner across domains such as IAM and Cloud, shaping governance-through-code within engineering workflows. You will collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams to ensure policy alignment, traceability, and continuous

Qualifications

• 7+ years in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to turn regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.
• Familiarity with modern development practices, cloud environments, and CI/CD.
• Strong analytical, communication, documentation, and stakeholder-management skills.

Responsibilities

• Translate enterprise security policies, regulatory requirements, and risk expectations into measurable, technically actionable controls.
• Grow into a Security Control Family Owner for domains like IAM, Cloud, Application Security, Cryptography, Data Protection, or Infrastructure Security.
• Develop and maintain security policies, technical standards, and control requirements.
• Define structured, machine-readable policy and control requirements; review implementations for policy alignment.
• Maintain a common control framework with clear objectives, ownership, and validation criteria.
• Collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Skills

Information security governance

Policy as code

Governance as code

Regulatory compliance

Cloud security

Security policies

CI/CD

Stakeholder management

Documentation

Risk assessment

Tools

OPA/Rego

HashiCorp Sentinel

YAML

JSON

GRC platforms

Job description

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and regulatory requirements into measurable controls.

The role grows into a Security Control Family Owner across domains such as IAM and Cloud, shaping governance-through-code within engineering workflows. You will collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams to ensure policy alignment, traceability, and continuous