Security GRC Lead, Governance Engineering

What you'll do

• Partner with Engineering and other stakeholders to assess how controls are designed, implemented, operated, and scaled; feed implementation findings into governance and control improvements.
• Translate regulatory and security expectations into actionable engineering requirements and develop independent oversight, control incident management, and change enablement.
• Assess M&A control and risk exposure, monitor emerging requirements including AI governance, and report control reliability and systemic risk to leadership.

What they ask for

• Strong technical background in security engineering, cloud security, product security, IAM, platform engineering, or security architecture.
• Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes.
• Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
• Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.

Nice to have

• Familiarity with AI security, AI governance, privacy, and evolving global technology regulations.
• Experience with independent control testing, assurance or audit practices, incident or root-cause analysis, or M&A due diligence.

Pay

$148,500 - $223,900 annually (base salary); $178,900 - $246,000 annually (base salary)

Tools

NIST, ISO 27001, SOC, SOX, FedRAMP

AI focus

Monitor AI governance and AI security requirements, including the EU AI Act, and determine how emerging expectations should inform security controls and engineering practices. Salesforce also uses AI tools to help recruiters assess candidates; humans make hiring decisions.