Senior Security Governance Engineer – Policy & GRC

Salesforce, Inc.; McLean (VA); Sur place; USD 149 000 - 224 000; Plein temps

Résumé du poste

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate policies and regulatory requirements into measurable controls and governance tooling. You will help evolve a policy-driven framework across IAM, cloud, data, and infrastructure domains, with ownership growing over time.

You will collaborate across Security, Compliance, Legal, and Engineering teams to embed governance into CI/CD and product lifecycles, automating policy enforcement and improving audit readiness.

Qualifications

• U.S. Citizenship or Permanent Residency required.
• 7+ years in information security governance, security engineering, technology risk, or related functions.
• Strong grasp of security policies, standards, control frameworks, and governance processes.
• Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
• Ability to turn regulatory and security requirements into measurable control objectives.
• Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
• Understanding of control design (preventive and detective), risk assessment, and exception management.
• Familiarity with modern development practices, cloud environments, and CI/CD.
• Strong analytical, communication, documentation, and stakeholder-management skills.

Responsabilités

• Translate enterprise security policies, regulatory requirements, and risk expectations into measurable, technically actionable controls.
• Grow into a Security Control Family Owner for domains such as IAM, Cloud, or Data Protection.
• Define structured, machine-readable policy and control requirements as Governance-as-Code.
• Maintain a common control framework with clear objectives and validation criteria.
• Collaborate with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams.
• Ensure alignment with architecture, risk appetite, and regulatory obligations.
• Establish traceability from regulation to policy to control to implementation.

Connaissances

Security governance

Regulatory requirements

Cloud security

IAM

Policy ownership

Risk assessment

Stakeholder management

Governance automation

Outils

OPA/Rego

HashiCorp Sentinel

YAML

Git

Description du poste

Salesforce, Inc. is seeking a Sr. Security Governance Engineer to translate policies and regulatory requirements into measurable controls and governance tooling. You will help evolve a policy-driven framework across IAM, cloud, data, and infrastructure domains, with ownership growing over time.

You will collaborate across Security, Compliance, Legal, and Engineering teams to embed governance into CI/CD and product lifecycles, automating policy enforcement and improving audit readiness.