Senior GRC Analyst, Policy Operations

Salesforce

. Triage intake for new or updated standards, policies, and control documents; assign owners and set timelines .

Posted 9/29/2026full-timeUnited StatesSenior💰 $117,200 - $176,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security governance and compliance operations, with a strong ability to draft clear standards and policies. Proficient in managing review cycles and stakeholder communications while utilizing GRC platforms and frameworks effectively.

Highest-signal resume keywords

Security GovernanceGRC Platform ExperienceTechnical WritingCross-Functional CollaborationSecurity/Privacy Framework Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security GovernanceTechnical WritingCompliance OperationsRisk AssessmentPolicy DevelopmentAppSecCloud SecurityIAMVulnerability ManagementGRC Knowledge

Soft Skills

Excellent CommunicationIndependenceProfessionalismStakeholder ManagementAttention to Detail

Tools & Technologies

Salesforce eGRCServiceNow GRCArcherOneTrustLogicGateGitOSCALMarkdown

Industry Keywords

SOC 2ISO 27001NIST CSFFedRAMPPCIHIPAAEU AI Act

Tech Stack

Tools & technologies

CloudServiceNow

About the role

Key responsibilities & impact

Triage intake for new or updated standards, policies, and control documents; assign owners and set timelines
Partner with Security Architecture, ProdSec, Trust, Privacy, and Legal subject-matter experts to draft and finalize standards
Own review and approval cycles, including CAB reviews, read-aheads, decision capture, and action-item tracking
Publish approved standards to the eGRC platform and retire superseded documents
Maintain traceability from external obligations to internal Salesforce Security Standards controls
Run content reviews to ensure ownership, current review dates, and ownership maps remain accurate
Flag policy drift and drive re-attestations
Build dashboards covering standards health, coverage, freshness, exception load, and adoption signals
Support onboarding of new standards driven by high-priority initiatives
Coordinate stakeholder communications, changelogs, engineering briefings, and Slack updates
Partner with Exception Management to define exception paths, approvers, and evidence expectations
Improve templates, workflows, checklists, and eGRC configuration to reduce cycle time
Responsibly use AI/GenAI tools for drafting, redlining, and summarization with human review

Requirements

What you’ll need

3+ years in security governance, GRC, technical writing, program management, or compliance operations at a software/product tech company
U.S. Citizenship or Permanent Residency
No visa sponsorship is available
Direct security-domain experience in AppSec, cloud security, IAM, vulnerability management, or GRC-adjacent work
Ability to read controls, understand risk, and challenge a requester's draft
Proven ability to write clear standards/policies non-security readers can act on
Working knowledge of a major security/privacy framework such as SOC 2, ISO 27001, NIST CSF, FedRAMP, PCI, HIPAA, EU AI Act, or equivalent
Comfort running cross-functional review cycles with senior stakeholders
Experience with Git
Familiarity with OSCAL and Markdown
Experience with a GRC platform such as Salesforce eGRC, ServiceNow GRC, Archer, OneTrust, LogicGate, or similar
Excellent written and verbal English communication
Ability to work independently across many parallel workstreams
Highest level of ethics, independence, and professionalism

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Reasonable accommodation during the application or recruiting process
AI tools to help recruiters assess and evaluate resumes and qualifications, with human candidate selection and hiring decisions