Senior Security GRC Analyst – Forward Deployed Assurance

Salesforce

. Support technical liaison activities between Assurance, Engineering, Product Security, PCLs, and Legal .

Posted 11/2/2026full-timeUnited StatesSenior💰 $117,200 - $176,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering, compliance frameworks, and risk assessment, with a strong ability to translate regulatory requirements into actionable technical solutions. Proficient in collaborating with cross-functional teams to enhance security controls and ensure compliance across diverse environments.

Highest-signal resume keywords

Security EngineeringCloud SecurityCompliance Frameworks (NIST, ISO 27001, SOC, SOX, FedRAMP)Risk AssessmentTechnical Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ControlsRegulatory ComplianceControl TestingIncident AnalysisAPIsSoftware Development ProcessesM&A Due DiligenceControl DesignGovernance ProcessesRisk Metrics

Soft Skills

Analytical MindsetStrong Communication SkillsCollaborationProblem-Solving

Tools & Technologies

Cloud EnvironmentsEngineering WorkflowsDocumentation ToolsChange Management Systems

Industry Keywords

AI GovernancePrivacy RegulationsOperational SecurityControl Incident ReviewsEngineering Standards

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Support technical liaison activities between Assurance, Engineering, Product Security, PCLs, and Legal
Evaluate security and compliance control implementation across applications, platforms, infrastructure, cloud environments, and engineering workflows
Assess control effectiveness and feed engineering feedback into control design, standards, and governance processes
Translate regulatory, compliance, and security expectations into actionable technical requirements
Execute second-line oversight protocols to independently monitor, audit, and validate operational security controls
Develop end-to-end understanding of platforms, architectures, engineering processes, security capabilities, and control implementations
Assess control and risk exposure during M&As and design executable risk assessment and activation plans
Partner on emerging security requirements and translate them into future controls and engineering expectations
Monitor evolving regulatory and compliance frameworks, including AI governance and the EU AI Act
Support change management, documentation, and training for engineering teams
Participate in control incident reviews and postmortems, root-cause analysis, and remediation tracking
Collaborate with control owners to refine controls based on operational findings and engineering feedback
Engage security and control champions across Engineering
Track and report control coverage, compliance trends, and risk metrics
Represent Assurance requirements in engineering and operational discussions

Requirements

What you’ll need

U.S. Citizenship or Permanent Residency required
Unable to provide visa sponsorship
Relevant experience or technical background in security engineering, cloud security, product security, IAM, platform engineering, or IT governance
Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes
Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements
Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks
Familiarity with AI security, AI governance, privacy, and evolving global technology regulations
Ability to work with Engineering and partner with Legal, Compliance, Security, Risk, and business stakeholders
Strong communication skills for explaining technical implementation details and translating governance expectations into actionable engineering requirements
Analytical mindset to evaluate requirements and provide constructive input based on practical constraints
Experience with independent control testing, assurance or audit practices, incident or root-cause analysis, or M&A due diligence is a plus

Benefits

Comp & perks

Time off programs
Medical insurance
Dental insurance
Vision insurance
Mental health support
Paid parental leave
Life insurance
Disability insurance
401(k)
Employee stock purchasing program
Incentive compensation may be available for certain roles
Equity may be available for certain roles