Senior Security GRC Analyst – Government Cloud

salesforce.com, inc.; Herndon (VA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a security professional to own government cloud security initiatives and advise partners on regulatory requirements, driving continuous compliance and robust accreditation processes.

The role requires experience with AWS/Azure/GCP government clouds, strong analytical skills, and the ability to communicate across business and technical teams in a fast-paced environment.

Qualifications

• Minimum 4 years of experience in information security, cybersecurity, accreditation, and other security related areas.
• Experience with Government Cloud environments such as AWS, Azure, GCP (SaaS, IaaS, PaaS).
• Experience in security-related analysis, creating metrics and dashboards and summarizing large data sets.
• Ability to work with both business and technical areas and translate between the two areas.
• Skilled at building rapport and establishing partnerships.
• Excellent verbal and written communication skills and ability to communicate results to multiple levels of management.
• Knowledge of security frameworks (FedRAMP20x, DoD SRG).
• Demonstrated desire to learn new skills and innovate.
• Agile, proactive, comfortable working with ambiguous specifications and can prioritize quickly and effectively.
• Excellent interpersonal, relationship, and organizational skills.
• Experience with DoD (DISA Cloud Assessment Division) and compliance engineering.

Responsibilities

• Drive existing or newly identified initiatives between stakeholder organizations creating synergies and reducing risk of non-compliance with internal or external requirements
• Support change management activities with federal authorization bodies
• Support multiple security pillars within Salesforce Government Cloud Division including continuous monitoring, advisory, incident response, AI adoption, and security documentation
• Consult with business or security stakeholders on information security requirements and applicability to business processes
• Create and maintain relationships with key stakeholders across the company for security requirements and solution management
• Focus on continuous improvement of operational processes and designing automated functionality for efficiency
• Effectively communicate accreditation positions and programs to applicable business stakeholders

Skills

Security governance

FedRAMP/DoD frameworks

Cloud security (AWS/Azure/GCP)

Communication skills

Agile

Automation & AI

Compliance engineering

Relationship building

AO coordination

Job description

Salesforce is seeking a security professional to own government cloud security initiatives and advise partners on regulatory requirements, driving continuous compliance and robust accreditation processes.

The role requires experience with AWS/Azure/GCP government clouds, strong analytical skills, and the ability to communicate across business and technical teams in a fast-paced environment.