Security GRC Analyst, Forward Deployed Assurance

About the role

Salesforce is looking for a technically strong Security Governance professional to act as the technical voice and face of Assurance. The role bridges Security and Compliance requirements with Engineering implementation, partnering with Engineering, Product Security, Legal and other stakeholders to turn security and compliance needs into practical, scalable governance requirements.

Key responsibilities

• Support Assurance and Engineering alignment, making sure governance requirements are understood and actionable
• Evaluate how security and compliance controls are implemented in applications, platforms, infrastructure, cloud environments and engineering workflows
• Turn regulatory, compliance and security expectations into clear technical requirements engineers can implement and validate
• Run second-line oversight, auditing and validating that security controls are operational (e.g. attestations, CRE checks)
• Assess control and risk exposure during M&A, and design assessments that lead to an executable activation plan
• Monitor emerging regulatory expectations such as AI governance and the EU AI Act, and feed them into future controls
• Help with change management, documentation and training, and support control incident reviews and root-cause analysis
• Work with security champions, control owners and leadership to improve control coverage and reporting

Required profile

• U.S. citizenship or permanent residency; no visa sponsorship available
• 2-3 years of experience in security engineering, cloud security, product security, IAM, platform engineering or IT governance
• Ability to understand complex systems, architectures, APIs, infrastructure and software development processes
• Experience translating security, risk, regulatory or compliance requirements into technical implementation requirements
• Strong communication skills and analytical mindset
• A plus: independent control testing, assurance or audit practice, incident analysis or M&A due diligence experience

Required skills

• Security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP or similar
• Familiarity with AI security, AI governance, privacy and evolving global technology regulations

What we offer

• Base salary of $117,200-$176,700, higher in the San Francisco and New York City metro areas ($141,200-$194,200)
• Benefits including time off, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k) and an employee stock purchase program