To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Enterprise Technology & Infrastructure
Job Details
About Salesforce
We're Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good - you've come to the right place.
Want more jobs like this?
Get jobs in McLean, VA delivered to your inbox every week.
GCC U.S. Public Sector Compliance Analyst / Senior Analyst
This candidate must be a U.S. citizen (U.S. born or naturalized) who does not hold dual citizenship and agrees to complete a U.S. federal government Minimum Background Investigation (MBI) for a Moderate Public Trust position.
Who We Are:
We're Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too - driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good- you've come to the right place.
Salesforce's Global Compliance and Certification is responsible for enterprise wide GCC processes, ensuring Salesforce leadership has the information needed to make strategic risk-based decisions enabling the achievement of Salesforce business objectives.
Security GCC team members understand business objectives, assess security risk of meeting those business objectives, and ensure that we have the appropriate controls in place to mitigate security risks and meet the needs of our global customer base. GCC role is critical in maintaining customer trust to ensure ongoing compliance and risk management.
Description:
In this role, you have accountability for a specific deliverable in GCC and are responsible for working with Engineering stakeholders, partners, and other members of GCC to deliver exceptional quality that reduces risk and ensures ongoing compliance for our customers. You are expected to own the area of responsibility with minimal guidance from senior team members. You should innovate, challenge the status quo, embrace operational excellence best practices and use automation and emerging technologies to enhance delivery of your work product.
Impact - Responsibilities:
- Assess security risk and ensure that controls are designed to appropriately mitigate security risk.
- Assess control effectiveness to ensure ongoing compliance.
- Drive existing or newly identified initiatives between stakeholder organizations creating synergies and reducing risk of non-compliance with internal or external requirements
- Consult with business or security stakeholders on information security requirements and applicability to their business processes, products, or services
- Create and maintain relationships with key business, legal, Employee Success, Internal Audit, technical/engineering stakeholders, and other organizations throughout the company who provide expertise in security requirements and solution management
- Focus on continuous improvement of operational processes and designing innovative and automated functionality for added efficiency
- Identify and create metrics and dashboards to quantify and measure the impact of security processes that you drive
- Effectively communicate compliance positions and programs to applicable business stakeholders
Minimum Qualification:
- Minimum 3 years of experience in security governance, risk management, compliance, audit, internal controls, or other security related areas and a minimum of 3-5 years of total work experience
- Experience working with Government Cloud environments such as AWS, Azure, GCP (SaaS, IaaS, PaaS etc)
- Experience in security related analysis, creating metrics and dashboards and summarizing large data sets
- Ability to work with both business and technical areas and translate between the two areas
- Skilled at building rapport and establishing partnerships
- Excellent verbal and written communication skills and ability to communicate results to multiple levels of management
- Knowledge of multiple regulatory compliance frameworks (NIST CSF & 800-53, ISO27001, SOX, SOC, HITRUST, HIPAA, FedRAMP, DOD SRG IL4/IL5, PCI, etc.)
- Operational process design, improvement, and implementation experience
- Demonstrated desire to learn new skills and innovate
- Agile, proactive, comfortable working with ambiguous specifications and can prioritize quickly and effectively
- Excellent interpersonal, relationship, and organizational skills
- Excellent analytical and process development skills
- Detail oriented with an eye for quality
- Drive improvements in existing processes and develop new innovative and efficient solutions
- Ability to work effectively with a wide range of individuals including developers, systems administrators, executives, customers, regulators, auditors, etc.
Required Qualifications:
- Experience building productive relationships with Technical Operations, Security Operations, Incident Response, Technical Compliance, Engineering, and other stakeholders
- Experience working with the Authorizing Officials and DISA Cloud Assessment Division
- Experience working with Information Security, GRC, ERM, Technology, Business, and Legal/Privacy functions
Preferred Qualifications:
- Knowledge of, or experience working with, Cloud technologies/environments is a plus
- CISSP, CISA, CISM, AWS or similar certifications a plus
Accommodations
If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.
Posting Statement
Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that's inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications - without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.
In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.