To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Products and Technology

Job Details

Trust is the #1 company value at Salesforce. Salesforce.com is the pioneer in cloud computing and has one of the best Information Security teams in the world. Growing this part of the business is a top priority. Our Information Security teams work hand in hand with the business to ensure the highest security around all of our infrastructure and applications.

Department Description:

Salesforce Security, Governance, Risk, and Compliance (GRC) Team is responsible for enterprise wide GRC ensuring Salesforce leadership has the information needed to make strategic risk-based decisions enabling the achievement of Salesforce business objectives globally. Our team builds and deploys common governance, risk, and compliance processes, controls, conducts audits, and ensures that technologies and business operations structured and configured for data protection and compliance.

Vision

The Salesforce Compliance Design program is anchored in the principles of Transparency, Inclusiveness, Accountability and Equality. We build, operate, and continuously improve a best in class, organizationally integrated and business value driven, security compliance program commensurate with the most secure enterprise cloud.

This role has high visibility throughout the entire organization, with growth potential and career path opportunities across technical and leadership roles.

Responsibilities:

• Contribute to and execute upon strategic direction for the Security Compliance program for all Salesforce products and services
• Design and optimize procedures and tooling for the Security Compliance. Educate and drive adoption of the designs and optimizations by all impacted stakeholders
• Define clear lines of responsibility between various Salesforce organizations including the first, second and third lines of defense
• Responsible for assuring process effectiveness, measurement and optimization
• Create and maintain security compliance program documentation (procedures, guidance, etc.)
• Prepare reports and presentations for multiple audiences with varying business objectives
• Support Governance, Risk & Compliance (GRC) tools implementation and utilization
• Coordinate with other teams and departments inside Security and across the greater organization
• Provide security compliance subject matter expertise for members of the Security organization
• Continuously identify improvement opportunities and provide feedback to senior team members and management

Required Skills:

• Relevant BA/BS degree, Master degree preferred
• 7+ years of related security governance, risk and compliance experience or equivalent security experience
• Experience working in or exposure to large-scale/global organizations
• Significant knowledge and experience in all facets of security compliance, able to articulate how it applies to our business
• In depth understanding of Security GRC and the component programs
• Ability to motivate people, instill accountability, and achieve results
• Experience engaging and managing consulting partners on projects
• Knowledge of multiple security compliance frameworks (NIST 800-53, ISO27001, SOC, HITRUST, HIPAA, FedRamp, PCI, GDPR, etc.)
• Industry certifications in security, technology, and/or business management are a plus (e.g., CISSP, CCIE, CISM, CISA)
• Agile, proactive, comfortable with ambiguous specifications and able to prioritize quickly and effectively
• Knowledge of, or experience working with, Cloud technologies/environments is a plus
• Experience working with Information Security, GRC, ERM, Technology, Business, and Legal/Privacy functions
• Excellent interpersonal and relationship skills
• Excellent analytical and process development skills
• Excellent presentation, facilitation and communication skills
• Experience with data and analytics dashboards and visualization tools
• Detail oriented with an eye for quality
• Ability to work effectively with a wide range of individuals including developers, systems administrators, executives, customers, regulators, auditors, etc.
• Experience with GRC platforms and tools
• Thrives in a fast-paced, collaborative environment, using research and analysis to support recommendations and opinions

Benefits & perks:
We have a public-facing website https://www.getsalesforcebenefits.com/en that explains our various benefits, including wellbeing reimbursement, generous parental leave, adoption assistance, fertility benefits, and more. Visit for the full breakdown!

Accommodations - If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at Salesforce and explore our benefits.

Salesforce.com and Salesforce.org are Equal Employment Opportunity and Affirmative Action Employers. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce.com and Salesforce.org do not accept unsolicited headhunter and agency resumes. Salesforce.com and Salesforce.org will not pay any third-party agency or company that does not have a signed agreement with Salesfore.com or Salesforce.org.

Salesforce welcomes all.

Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.