Senior Security GRC Architect — Hybrid/Remote-Eligible

Salesforce, Inc.; Bellevue, Atlanta, McLean, San Francisco (GA, GA, VA, CA); Hybrid; USD 117,000 - 177,000; Full time

Job summary

Salesforce, Inc. is seeking a Sr. Security GRC Analyst in Forward Deployed Assurance to bridge security governance with engineering.

You will translate regulatory and security requirements into actionable technical specs and partner with Product Security, Legal, and Engineering to implement controls. You will support risk assessments, monitor control effectiveness, and help shape a scalable governance program across cloud environments and M&A activity, with strong communication to

Qualifications

• U.S. Citizenship or Permanent Residency required.
• Experience in security engineering, cloud security, product security, IAM, platform engineering, or IT governance.
• Ability to translate security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.
• Familiarity with emerging technology and regulatory areas such as AI security, AI governance, privacy, and evolving global technology regulations.

Responsibilities

• Bridge governance requirements between Assurance and Engineering to ensure clear, actionable guidance.
• Evaluate control implementations within applications, platforms, and cloud environments.
• Create an engineering feedback loop to improve control design and governance processes.
• Translate regulatory and security expectations into technical requirements teams can implement and validate.
• Develop second-line oversight to audit and attest that controls operate across engineering teams.
• Deeply understand platforms and architectures to inform risk and compliance decisions.
• Assess control and risk exposure during M&As and design actionable activation plans.
• Collaborate with Product Security, Legal, and Risk teams to translate emerging requirements into future controls.
• Monitor regulatory and compliance trends, including AI governance and international requirements.
• Support change management, documentation, and training to improve governance adoption and incident response.

Skills

security engineering

cloud security

product security

IAM

platform engineering

IT governance

NIST

ISO 27001

SOC

SOX

FedRAMP

AI governance

privacy

regulatory requirements

Job description

Salesforce, Inc. is seeking a Sr. Security GRC Analyst in Forward Deployed Assurance to bridge security governance with engineering.

You will translate regulatory and security requirements into actionable technical specs and partner with Product Security, Legal, and Engineering to implement controls. You will support risk assessments, monitor control effectiveness, and help shape a scalable governance program across cloud environments and M&A activity, with strong communication to