Lead Security Engineer, Salesforce

• As a key member of the Risk & Compliance Team, you understand that building user trust is critical to Slack’s success
• You are passionate about information security, risk management, Sarbanes-Oxley IT General Controls (SOX ITGC), privacy and maintaining customer confidence
• You have the focus and organization to champion the adoption of sound security and SOX ITGC practices across all of Slack’s business and engineering teams
• You are passionate about learning, building, and sustaining processes to address new regulatory and compliance requirements
• We are seeking a motivated individual that is not only focused on delivering results but does so in a collaborative and courteous manner
• Sound understanding of cloud security and control principles including logical access controls, change control, privileged access, segregation of duties, computer operations, network security, vulnerability management, and secure coding
• 5+ years of experience in auditing and assessing Sarbanes-Oxley (ITGC) controls
• Experience implementing, participating in, or conducting security assessments of compliance programs (e.g. SOC 2, FedRAMP, NIST, ISO 27001/27017/27018, HIPAA, HITRUST, Sarbanes-Oxley ITGC, etc.)
• Experience leading compliance efforts for Identity and Access Management solutions (E.g. Sailpoint IdentityNow)
• Ability to work independently
• Ability to work with cross-functional stakeholders to reach desired outcomes
• Effective communication with great interpersonal and presentation skills; ability to translate complex technical issues into simple language that people who are not experts can understand

Desirable

• Our Security teams support the unwritten fourth tenet of Slack’s mission: make people’s working lives more secure
• We’re serious about protecting our infrastructure, operations, and most importantly, our customers’ data
• We take a systemic approach to security and strive to ensure we provide low friction high-impact security across everything we do
• In this role, your work will directly impact the way millions of users, teams and businesses get things done
• Act as the compliance subject matter expert for Engineering systems to provide leadership in managing ITGC auditing activities, requests and developing responses to audit findings, leading remediation of audit findings
• Provide quality assurance of ITGC controls for Engineering to ensure operational effectiveness of those security controls in Engineering
• Identify risks and gaps and facilitate remediation
• Conduct and participate in walkthroughs with engineering stakeholders and auditors
• Facilitate tests of design and operational effectiveness for key information technology controls
• Assist control owners with root cause analysis and track risk management action plan progress
• Implement issue tracking and resolution process
• Deliver risk metrics to management regarding audit performance and findings
• Assist the performance of security risk assessments to maintain compliance with AICPA Trusted Service Principles and ISO security standards
• Assist in the design and implementation of information security compliance controls to address current risks, emerging threats and compliance standards

• End Date: February 24, 2026