Salesforce

1 week ago

Security GRC Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own FedRAMP end-to-end authorization and maintenance, serving as an ISSO to keep compliance current for cloud products serving public sector customers. Drive continuous monitoring and support annual external audits, working with 3PAOs, sponsoring agencies, and FedRAMP PMO. Partner with engineering, product, sales, and legal to onboard new offerings into the compliance boundary and translate FedRAMP/NIST requirements into actionable guidance.

Location: Washington

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Own and manage FedRAMP and related authorization programs end to end, including relationships with 3PAOs, sponsoring agencies, and the FedRAMP Program Management Office; maintain the SSP and POA&M.
•Drive continuous monitoring and lead annual external audits, including planning, scheduling, preliminary analysis, and training/support for cross-functional partners.
•Partner with engineering, product, sales, and legal to onboard new cloud products into the compliance boundary and address findings per FedRAMP regulatory standards.
•Provide subject-matter expertise on public sector requirements to internal stakeholders and customers.
•Contribute to compliance reporting and metrics to support informed decision-making.

Pay and Benefits

Salary: USD 148,500 - 223,900 annually

Perks:Health InsuranceDentalVisionPaid Parental401k

Key Requirements

•5+ years of FedRAMP industry experience, including program and project management at a software company.
•Hands-on experience with government cloud environments such as AWS GovCloud, Azure Government, or Google Cloud across SaaS, IaaS, and PaaS.
•Strong working knowledge of security governance and compliance standards including SOC 2, ISO 27001, PCI DSS, HIPAA, and CMMC.
•Ability to communicate clearly and translate compliance requirements into actionable guidance for engineering, product, DevSecOps, and executive stakeholders.
•U.S. citizenship (no dual citizenship) and willingness to complete a U.S. federal government Minimum Background Investigation for a Moderate Public Trust position.

Skills:CommunicationStakeholder managementRisk reductionCross-functional collaboration

Certifications:CISSPCRISCCISACISMGIAC

Tech Stack:FedRAMPNIST 800-53AWS GovCloudAzure GovernmentGoogle CloudSaaSIaaSPaaSSOC 2ISO 27001PCI DSSHIPAACMMCCISSPCRISCCISACISMGIACTX-RAMPUK Cyber Essentials

Eligibility

Nationality:US National

Security Clearance:Moderate Public Trust

Company Brief

Salesforce

Provides a leading cloud-based customer relationship management (CRM) platform with sales, service, marketing, analytics, and integration tools that empower businesses to manage customer relationships and digital transformation at scale.

Industry: SaaS

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1999

Glassdoor: 4.1

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Salesforce

1 week ago

Security GRC Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Washington

Workplace: Onsite

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Own and manage FedRAMP and related authorization programs end to end, including relationships with 3PAOs, sponsoring agencies, and the FedRAMP Program Management Office; maintain the SSP and POA&M.
•Drive continuous monitoring and lead annual external audits, including planning, scheduling, preliminary analysis, and training/support for cross-functional partners.
•Partner with engineering, product, sales, and legal to onboard new cloud products into the compliance boundary and address findings per FedRAMP regulatory standards.
•Provide subject-matter expertise on public sector requirements to internal stakeholders and customers.
•Contribute to compliance reporting and metrics to support informed decision-making.

Pay and Benefits

Salary: USD 148,500 - 223,900 annually

Perks:Health InsuranceDentalVisionPaid Parental401k

Key Requirements

•5+ years of FedRAMP industry experience, including program and project management at a software company.
•Hands-on experience with government cloud environments such as AWS GovCloud, Azure Government, or Google Cloud across SaaS, IaaS, and PaaS.
•Strong working knowledge of security governance and compliance standards including SOC 2, ISO 27001, PCI DSS, HIPAA, and CMMC.
•Ability to communicate clearly and translate compliance requirements into actionable guidance for engineering, product, DevSecOps, and executive stakeholders.
•U.S. citizenship (no dual citizenship) and willingness to complete a U.S. federal government Minimum Background Investigation for a Moderate Public Trust position.

Skills:CommunicationStakeholder managementRisk reductionCross-functional collaboration

Certifications:CISSPCRISCCISACISMGIAC

Tech Stack:FedRAMPNIST 800-53AWS GovCloudAzure GovernmentGoogle CloudSaaSIaaSPaaSSOC 2ISO 27001PCI DSSHIPAACMMCCISSPCRISCCISACISMGIACTX-RAMPUK Cyber Essentials

Eligibility

Nationality:US National

Security Clearance:Moderate Public Trust

Company Brief

Salesforce

Industry: SaaS

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1999

Glassdoor: 4.1

Website LinkedIn Glassdoor