Senior Security GRC Analyst, Salesforce

• 3-5 years of experience managing global compliance assessments in a complex environment
• Prior experience in a compliance and regulatory environment related to security and privacy including security compliance standards across industries and geographies such as ISO 27001, SOC, HIPAA, PCI, HITRUST, and FedRAMP, etc
• Project management and stakeholder management experience
• Technical knowledge and understanding of different hyperscaler environments such as AWS
• Experience with compliance automation tools and processes
• Strong Analytical and problem solving skills with the ability to assess risks and recommend solutions
• Detail oriented with strong organizational and documentation skills
• Ability to solve unique, complex and often ambiguous problems with broad impact on the business
• Conceptual and innovative thinking to develop and implement solutions
• Ability to work independently and collaboratively in a fast paced regulatory environment
• Identify risk in processes and environments, and strategies to mitigate the risk

Desirable

• The Global Compliance and Certification (GCC) team is responsible for enterprise wide compliance processes, ensuring Salesforce leadership has the information needed to make strategic risk-based decisions
• You will be part of the GCC org, a division within the Product Security Organization and you will play a pivotal role in driving and overseeing cloud security compliance that support Salesforce’s products
• Develop and execute audit strategies to ensure compliance with global standards and regulatory requirements
• Partner directly with engineering leaders, and become familiar with their processes covering multiple domains
• Act as the primary liaison between external audit requests and engineering. Be able to lead walkthroughs with external assessors as needed
• Partner with cross-functional teams to execute audit recommendations and strengthen compliance preparedness
• Document detailed playbooks on processes and domains that can be leveraged for assessments
• Help drive automation efforts and continuous improvement projects to boost the efficiency of audit processes
• Deliver consistent reports to leadership on audit outcomes, emerging trends, and potential compliance risks