Senior Security GRC Analyst - Federal Cloud Compliance

salesforce.com, inc.; McLean (VA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a security-focused professional for the Government Cloud Division in the United States. The role emphasizes owning a broad area of responsibility, driving security initiatives, and advising business partners on adopting new security requirements.

You will engage with stakeholders across legal, audit, engineering, and operations to strengthen compliance and integration of security controls with existing processes while embracing automation and innovative practices.

Qualifications

• Minimum 4 years of experience in information security, cybersecurity, accreditation, and other security related areas.
• Experience with Government Cloud environments such as AWS, Azure, GCP (SaaS, IaaS, PaaS etc) is required.
• Excellent verbal and written communication skills and ability to communicate results to multiple levels of management.
• Knowledge of security frameworks (FedRAMP20x, DoD SRG) and compliance engineering is preferred.
• Agile, proactive, and able to prioritize in ambiguous situations.

Responsibilities

• Drive initiatives between stakeholder organizations to reduce risk and ensure compliance.
• Support change management activities with federal authorization bodies.
• Support security pillars within Salesforce Government Cloud Division including monitoring, advisory, incident response, and AI adoption.
• Consult with business or security stakeholders on information security requirements.
• Build relationships with legal, audit, engineering and other stakeholders to ensure security requirements are met.
• Design and implement innovative, automated solutions to improve operational efficiency.
• Communicate accreditation positions and programs to applicable business stakeholders.

Job description

Salesforce is seeking a security-focused professional for the Government Cloud Division in the United States. The role emphasizes owning a broad area of responsibility, driving security initiatives, and advising business partners on adopting new security requirements.

You will engage with stakeholders across legal, audit, engineering, and operations to strengthen compliance and integration of security controls with existing processes while embracing automation and innovative practices.