Data Analyst

Salesforce Compliance & Data Governance Analyst

Hybrid (2 days a week Arlington, VA)

U.S. Citizen or Permanent Resident (Required)

We're seeking a self-directed Compliance & Data Governance Analyst to own and build compliance and data governance work streams supporting a federal client's extensive Salesforce platform. This role blends traditional compliance auditing (access reviews, POAMs, data quality) with data classification strategy, Code Scan administration, and cross-team collaboration in an Agile environment.

This is a hands‑on, high‑ownership role. You'll independently research, synthesize findings, and present clear recommendations to technical and government stakeholders, not just gather information for someone else to interpret.

• Own audit work streams end-to-end: user provisioning (AC-2) reviews, POAM tracking, batch job audits, and bi-yearly data quality audits
• Design and stand‑up new audit work streams from the ground up, establishing repeatable, ongoing audit processes.
• Drive data classification initiatives; able to map Salesforce fields to VA standards (CUI, FIPS-199, PTA/PIA) and identify governance gaps
• Configure Code Scan reports and support auditing of new rule enforcement as the platform evolves
• Participate actively in Agile ceremonies (PI/sprint planning, backlog refinement)
• Proficient at writing clear, well-structured Agile Stories tracked in Jira
• Use AI tools (e.g., Claude) to accelerate research and documentation, and critically evaluate that output before acting on it
• Present findings, business value, and recommendations directly to leadership and government stakeholders

• Public Trust clearance is required; employment is contingent upon a successful background investigation
• Bachelor’s degree in business, information systems, or related field
• 5+ years in compliance auditing, IT governance, or data governance, ideally in a federal/government IT environment
• Basic understanding of Salesforce as an Application Development platform. Ideally with hands‑on experience as a Salesforce Admin with some declarative capabilities. Certification or active Trailhead progress a plus but not required.
• Familiarity with NIST AC-2, FIPS-199, POAM processes, and VA compliance frameworks (PTA/PIA) or similar industry‑specific concepts
• Working knowledge of code scanning (Code Scan), web security scanning (ZAP), and related Dev Sec Ops  tools
  
  Required hard skills, tools, frameworks, technologies, etc. with years of experience
• Experience working in Agile/Scrum environments, with strong Jira hygiene for work planning and execution and daily time tracking for capacity planning
• Strong written and verbal communication skills, including the ability to defend findings and business value to senior stakeholders independently
• Ability to design and run small projects (in the form of Epics) given access to SMEs and with the support of a BA and Scrum Master
• Comfort using AI tools to support analysis and documentation, with strong underlying critical thinking, you drive the conclusion, not just the research
• Proficiency with Confluence, SharePoint, and Microsoft Office (or similar)

Standard Business hours are Monday through Friday 8:00 – 5:00 PM ET. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

The base salary range for this position is $90,000 to $120,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices…