GRC Senior Analyst, Salesforce
$111.4-183.9k
World's leading CRM provider
Job no longer available
World's leading CRM provider
1001+ employees
Job no longer available
$111.4-183.9k
1001+ employees
Company mission
To empower companies to connect with their customers in a whole new way.
Role
Who you are
- A successful candidate for this role will be a good communicator who excels at explaining complex technology to diverse audiences (across varying technical and business backgrounds) in a way that fosters understanding and ownership
- Innovation, creativity and critical thinking are key qualifications, as this role will assist business and technical partners in designing scalable, sustainable approaches to satisfying our regulatory requirements
- The ability to build influence and evangelize for new initiatives among partners and engineering teams in multiple organizations will be a crucial driver for success, as will an unflappable demeanor and grace under pressure
- This role will work with the business at all organizational layers, so it will be important to demonstrate flexibility in approach, communication style and depth of understanding
- The successful candidate must be comfortable working in a very fast-paced and constantly evolving environment
- BA or BS in Computer Science or any related subject area, or 3+ years of experience
- In-Depth technical background with a good understanding of security concepts and practical usage (Network Engineering, Network Security, Threat and Vulnerability Management, Database, SDLC, and Release Management)
- Knowledge of, or experience working with, Cloud technologies/environments, including evaluating and implementing controls on Infrastructure as a Service (IaaS) environments
- Prior experience in a compliance and regulatory environment related to security and privacy including security compliance standards across industries and geographies such as ISO 27001, SOC, HIPAA, PCI, HITRUST, and FedRAMP
- Prior experience with certification frameworks such as Protected B, K-ISMS, C5 is a plus
- Possess a “whatever it takes to get the job done” mentality (i.e., pick up the phone, stop by a desk, follow-up multiple times)
- Proven security experience in IT audit or advisory
- Analytical thinker with strong organizational skills; attention to detail is a must
- Ability to work efficiently with minimal oversight/direction
- Excellent written and verbal communication skills; ability to effectively communicate across all levels of the Company
- Strong cross team collaboration skills
- Ability to travel up to 10%
- Certifications (CRISC, CISSP, CCIE, CISM, CISA, CCSK) are a plus
What the job involves
- This role has a global reach and directly supports sales growth as well as our #1 core value of Trust
- The role will be focused on evaluating technology controls, performing audit readiness, and acting as a compliance domain expert to the business
- In addition, this role will support the onboarding and migration of new engineering services to our standardized public cloud deployment model, called Hyperforce
- This role will also work directly with our internal engineering, security, and product teams on current and future capabilities that could affect the compliance of our products
- The CO&D team is responsible for evaluation, prioritization and commitment decisions for net-new requests to pursue new security compliance certifications. Additionally, the CO&D team is responsible for the execution of compliance readiness for new products looking to achieve certifications such as HIPAA, SOC 2, ISO 27001/17/18, and PCI. This role has a global reach and directly supports sales growth as well as our #1 core value of Trust. The role will be focused on evaluating technology controls, performing audit readiness, and acting as a compliance subject matter expert to the business. In addition, this role will support the onboarding and migration of new engineering services to our standardized public cloud deployment model, called Hyperforce. This role will also work directly with our internal engineering, security, and product teams on current and future capabilities that could affect the compliance of our products
- Team - GRC Security Compliance Team
- The GRC Security Compliance team aims to deliver a compliance foundation inheritable by all products and services within the Salesforce ecosystem. We deliver an enterprise level control suite for all products to place reliance on, and are also responsible for achieving and maintaining compliance certifications for all products on Hyperforce. We additionally strive to efficiently and tactically centralize and standardize the operation of controls and the testing of control effectiveness to enable the delivery of compliance needs supporting customer trust. We are responsible for maintaining and execution certifications such as SOC 1, SOC 2, SOC 3, ISO 27001/17/18, HIPAA, PCI, HITRUST, C5, etc
- Impact - Responsibilities:
- Plan, coordinate and implement work assignments with process/control owners and external auditors
- Perform compliance readiness testing, document results, and provide updates to the Security management, and internal partners (Engineering, Sales, Product Management, Legal, etc.)
- Manage the timely and high-quality execution of GRC landmarks
- Advise process & control owners with the preparation and on-going maintenance of controls and control documentation (e.g., policies, procedures, narratives, and matrices)
- Proactively identify gaps or conflicts in existing policies and processes and work to develop solutions with internal business partners
- Assist with and drive remediation of process and control deficiencies and gaps identified internally and externally
- Educate and train process/control owners to better understand the security controls framework and their responsibilities
- Evaluate and advise on new and evolving certification programs and technology
- Build strong relationships with business partners and facilitate continuous improvement aligned with operational processes
- Effectively communicate program execution status, key accomplishments, and risks to senior management both within Security and to our business partners
Our take
Salesforce is a global cloud computing company, best known for its on-demand, comprehensive customer relationship management (CRM) solutions. The company was launched to mitigate the doubts that business owners felt regarding third party companies holding their data.
By providing essential, customer-oriented CRM software, Salesforce places itself at the heart of digitised businesses. Furthermore, by building out its AI capabilities, the company removes the complexity of AI, enabling any business to deliver smarter, personalised and more predictive customer experiences.
Due to the continued innovation offered by the company, over 150,000 companies, both big and small, are growing their business with Salesforce today. Despite a tumultuous 2023 filled with activist investors, a boardroom shake-up and the unprecedented step-down of Co-CEO Bret Taylor, Salesforce continues to close several acquisition deals and managed to drive up its stock value by 96% from the end of 2022 to 2023.
Steph
Company Specialist at Welcome to the Jungle
Insights
-8% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Jun 2001
$46.9m
SERIES D
Nov 1999
$13.2m
SERIES C
Total funding: $64.5m
Company benefits
- With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year
Company HQ
SoMa, San Francisco, CA
Leadership
Marc Benioff
(Chair & CEO)Previously Senior Vice President at Oracle Corporation for 13 years.
Parker Harris
(CTO)Previously worked as a Software Engineer for over six years. Harris also co-founded Left Coast Software.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 338 more jobs at Salesforce