Manager, Security GRC

at  Salesforce

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.
Job Category
Enterprise Technology & Infrastructure
Job Details

• Plan, coordinate and execute work assignments with process/control owners and external auditors
• Perform compliance readiness testing, document results, and provide updates to the Security management, and internal stakeholders (Engineering, Sales, Product Management, Legal, etc.)
• Manage the timely and high-quality execution of GRC milestones.
• Advise process & control owners with the preparation and on-going maintenance of controls and control documentation (e.g., policies, procedures, control narratives, and responsibility matrices)
• Proactively identify gaps or conflicts in existing policies and processes and work to develop solutions with internal business partners.
• Assist with and drive remediation of process and control deficiencies and gaps identified internally and externally
• Educate and train process/control owners so they better understand the security controls framework and their responsibilities
• Evaluate and advise on new and evolving certification programs and technology.
• Build strong relationships with business partners and facilitate continuous improvement aligned with operational processes.
• Effectively communicate program execution status, key accomplishments, and risks to senior management both within Security and to our business partners