Security GRC Analyst, Salesforce

• Pursuing a BS/MS in Information Security or related degree
• Basic knowledge in security governance, risk and compliance frameworks and management
• Ability to communicate and work collaboratively with multiple levels in the technology organization
• Excellent interpersonal and relationship skills
• Excellent presentation, facilitation and communication skills
• Execution oriented and a self-motivator
• Excellent documentation skills for all tasks
• Ability to work alone, in a group, and with guidance to make decisions
• Ability to think critically and analyze problems
• Able to articulate situation, challenges, risks, and see intersection of compliance impacts

Desirable

• Governance Risk and Compliance (GRC) Team provides the full range of GRC services to the organization
• These services include policy and standards creation and management, compliance readiness, risk assessments, vendor assessments and issues and exceptions management
• The intern on the team may work on a variety of different projects, depending on the team within GRC, including: conducting audit fieldwork, coordinating and following up on risk assessments with technical teams, managing issues and exceptions, and contributing to the improvement of our ISO program and GRC data automation processes
• This requires technical background knowledge and the ability to learn new technical concepts and apply risk and control framework knowledge
• This also requires exceptional analytical, verbal and written communications skills and an ability to create and foster strong relationships with cross-functional partners
• Obtain and analyze control process policies, standards and supporting documentation
• Identify and document areas of gaps or risks in existing control processes and work to develop solutions with internal business partners
• Build strong relationships with business partners and help facilitate continuous improvement aligned with operational processes
• Collaborate with the team to effectively communicate program execution status, key accomplishments, and risks to management both within GRC and to our business partners
• Conduct readiness assessments for Salesforce products and services to determine adherence to compliance requirements and ability to onboard to Salesforce Government Cloud(s)
• Partner with a member of the team to meet with our stakeholder groups to gather and document requirements for process or technology improvements
• Data collection and analysis, including data maintenance and cleanup
• Collaborate on technical solutions to business problems, including working with developers
• Develop proof of concept solutions and meet with the team/stakeholder groups to obtain buy-in
• This role supports all aspects of the disaster recovery capabilities for Salesforce
• This role will work across business and engineering leadership on the design, implementation, and maintenance of the Salesforce Technical Resilience Program
• This role will provide resilience and security subject matter expertise across business and technology stakeholders