Security Governance, Risk & Compliance Manager - Security IEM

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category Enterprise Technology & Infrastructure Job Details About Salesforce We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM.
Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way.
And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world.
If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.
About Salesforce: We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM.
Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way.
And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world.
If you believe in business as the greatest platform for change and in companies doing well and doing good– you’ve come to the right place! Salesforce’s Security, Governance, Risk, and Compliance (GRC) Team is responsible for enterprise wide GRC processes, ensuring Salesforce leadership has the information needed to make strategic risk-based decisions enabling the achievement of Salesforce business objectives.
Our team designs and ensures common governance, risk, and compliance processes across the Enterprise.
Security GRC team members understand business objectives, assess security risk of meeting those business objectives, and ensure that we have the appropriate controls in place to mitigate security risks and meet the needs of our global customer base.
GRC’s role is critical in maintaining customer trust to ensure ongoing compliance and risk management! Description: In this role, you will be part of the Security Issues & Exceptions Management(IEM) program team and responsible to deliver exceptional quality security risk acceptance decisions in partnership with Engineering collaborators, security partners, and other members of GRC to help reduce risk and ensures ongoing compliance for our customers.
You are expected to lead the area of responsibility with minimal guidance from senior team members.
You should innovate, challenge the status quo, embrace operational excellence standard processes and use automation and emerging technologies to enhance delivery of your work product.
Impact - Responsibilities: Understand, assess and formally articulate security risks and Salesforce Security Standards for which our engineering partners are seeking exceptions.
Deliver high quality risk acceptance documentation with clearly articulated risks and business impact to leadership for their approval Ensure that remediation action plans are designed to appropriately mitigate security risk.
Support business and product release commitments by driving risk acceptance for unmitigated security risks across key partners Find opportunities to collaborate across Security and product engineering collaborators to reduce risk of non-compliance with internal or external requirements Consult with business or security partners on information security requirements and applicability to their business processes, products, or services Create and maintain relationships with key business, legal, Employee Success, Internal Audit, technical/engineering collaborators, and other organizations throughout the company who guide in security requirements and Security Risk detection programs Focus on continuous improvement of operational processes and designing innovative and automated functionality for added efficiency Identify and create metrics and dashboards to quantify and measure the impact of security Issues & exceptions management (IEM) processes that you drive Effectively communicate Risk Acceptance positions and programs to applicable business partners Minimum Qualification: Demonstrated ability of 5+ years in security governance, risk management, compliance, audit, internal controls, or other security related areas and a minimum of 7-10 years of total work experience In-Depth technical background with a good understanding of security concepts and practical usage (Network Engineering, Network Security, Threat and Vulnerability Management, Database, SDLC, and Release Management) Understanding of t he Common Vulnerability Scoring System (CVSS) and other vulnerability risk scoring systems used in the industry.
Detail oriented with excellent written communication skills that is required to support delivery of high quality risk acceptance case documentation to leadership Familiarity with regulatory compliance frameworks (NIST CSF & 800-53, ISO27001, SOX, SOC, HITRUST, HIPAA, FedRAMP, PCI, etc.
) Experience in security related data analysis, creating metrics and dashboards and summarizing large data sets Ability to work with both business and technical areas and translate between the two areas Skilled at building rapport, establishing partnerships and strong verbal communication skills Excellent interpersonal and organizational skills with an ability to communicate results to multiple levels of management Innovative operational process design and process improvement implementation skills Proven desire to learn new skills and innovate Agile, proactive, comfortable working with ambiguous specifications and can prioritize quickly and optimally Drive improvements in existing processes and develop new innovative and efficient solutions Ability to work optimally with a wide variety of individuals including developers, systems administrators, executives, customers, regulators, auditors, etc.
Required Qualifications: Experience working with Cloud technologies/environments CISSP, CISA, CISM, AWS or similar certifications Demonstrable Experience with Information Security, GRC, ERM, Technology, Business, and Legal/Privacy functions Preferred Qualifications: Experience working with the FedRAMP PMO, FedRAMP JAB, and DISA a plus *LI-Y Accommodations If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form .
Posting Statement At Salesforce we believe that the business of business is to improve the state of our world.
Each of us has a responsibility to drive Equality in our communities and workplaces.
We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more.
Learn more about Equality at www.
equality.
com and explore our company benefits at www.
salesforcebenefits.
com .
Salesforce is an Equal Employment Opportunity and Affirmative Action Employer.
Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
Salesforce does not accept unsolicited headhunter and agency resumes.
Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce .
Salesforce welcomes all.
Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records.
For Colorado-based roles, the base salary hiring range for this position is $133,400 to $183,400.
For Washington-based roles, the base salary hiring range for this position is $146,600 to $201,700.
For California-based roles, the base salary hiring range for this position is $160,000 to $220,000.
Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience.
Certain roles may be eligible for incentive compensation, equity, benefits.
More details about our company benefits can be found at the following link: https://www.
salesforcebenefits.
com.