Senior Security Governance Engineer | Policy-as-Code

Leadout Capital; San Francisco (CA); Presencial; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Salesforce is modernizing assurance by embedding governance into the engineering lifecycle. You will translate policy into measurable controls and build a scalable governance framework across IAM, Cloud, and Data Security.

This role focuses on policy design, governance processes, and collaboration with cross-functional teams. You’ll evolve into a Security Control Family Owner for multiple domains, driving policy alignment and continuous improvement without hands-on software development.

Formación

• 7+ years in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to turn regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.

Responsabilidades

• Policy and standards: Develop and maintain security policies, technical standards, and control requirements.
• Governance-as-Code / Policy-as-Code: Define structured, machine-readable policy and control requirements. Work with engineering to turn them into guardrails and validation criteria.
• Control framework: Maintain a common control framework with clear objectives, ownership, and validation criteria.
• Control family ownership: Act as the SME and point of contact for your assigned domains.
• Collaboration: Work with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.

Conocimientos

Information security governance

Policy & standards

Policy-as-Code

NIST CSF & ISO 27001

Cloud security

IAM & data security

Risk assessment

Stakeholder management

Herramientas

OPA/Rego

HashiCorp Sentinel

GRC platforms

Descripción del empleo

Salesforce is modernizing assurance by embedding governance into the engineering lifecycle. You will translate policy into measurable controls and build a scalable governance framework across IAM, Cloud, and Data Security.

This role focuses on policy design, governance processes, and collaboration with cross-functional teams. You’ll evolve into a Security Control Family Owner for multiple domains, driving policy alignment and continuous improvement without hands-on software development.