Senior Security Governance Architect

Salesforce, Inc.; Washington; On-site; USD 150,000 - 210,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and regulatory requirements into measurable controls and to own governance for multiple domains.

You will collaborate across engineering and security teams to build a scalable governance framework and ensure policy alignment with architecture and risk appetite. Focus areas include policy ownership, policy-as-code, and continuous improvement of control effectiveness across IAM, cloud, and data security

Qualifications

• 7+ years in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to turn regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.
• Familiarity with modern development practice.

Responsibilities

• Policy and standards: Develop and maintain security policies, technical standards, and control requirements; manage lifecycle.
• Governance as Code / Policy as Code: Define structured, machine-readable policy requirements and guardrails with engineering alignment.
• Control framework: Maintain a common framework with ownership and validation criteria; support evaluation of effectiveness.
• Control family ownership: Act as SME for assigned domains; assess gaps, exceptions and emerging risks.
• Collaboration: Work with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Skills

Policy & Standards

Governance as Code

Policy as Code

Control framework

Control ownership

Collaboration

OPA

Rego

Tools

OPA

Rego

Job description

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate security policies and regulatory requirements into measurable controls and to own governance for multiple domains.

You will collaborate across engineering and security teams to build a scalable governance framework and ensure policy alignment with architecture and risk appetite. Focus areas include policy ownership, policy-as-code, and continuous improvement of control effectiveness across IAM, cloud, and data security