Senior Manager, Technology Risk and Controls

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You're in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Job Title:

Sr. Manager, Technology Risk and Controls (Revenue)

About the Role

Salesforce is seeking a Sr. Manager, Technology Risk and Controls to join the Digital Enterprise Technology (DET) team. This individual contributor role will operate as a crucial part of the second line of defense within our Governance pillar, dedicated to managing and maturing our SOX IT control environment. The Senior Manager will be responsible for ensuring the ongoing execution, effectiveness, and readiness of DET's SOX IT controls.

You will serve as the primary liaison between internal control owners, our external audit partners, and internal audit teams, translating complex audit requirements including those emerging from AI and Machine Learning (ML) implementations into clear, executable compliance activities to ensure timely completion of SOX activities.

Your Impact - Responsibilities

* Play a critical role in ensuring the execution of annual SOX audit activities for Revenue processes, working closely with internal and external audit partners for SOX IT controls within DET to ensure requested support and follow up questions are addressed timely. This includes assessing the impact of AI/ML models on financial reporting and working with audit partners to ensure that automated decision-making within the Revenue cycle is transparent, traceable, and compliant

* Act as a central point of contact for DET Revenue technology teams, ensuring stakeholders are clear on their responsibilities as it pertains to control execution, audit walkthrough preparation, and required audit evidence.

* Partner with DET Revenue control owners to track, manage, and facilitate the timely remediation of any SOX audit findings or control deficiencies. Proactively identify risks associated with algorithmic bias, data integrity in AI training sets, and model drift that could impact financial accuracy.

* Build and maintain strong, collaborative relationships with cross-functional partners (e.g., Internal Audit, Finance, Security, and DET Revenue technology teams to ensure alignment on system scoping and controls approach within DET.

* Identify opportunities for control optimization and standardization across the DET control landscape to enhance efficiency, reduce manual effort, and improve the overall control posture.

Minimum Qualifications

* Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or comparable professional work experience

* 7+ years of experience in IT audit, risk and control, risk management, or a related field, preferably within a large, global technology organization.

* Deep subject matter expertise in supporting Revenue Cycle (Quote-to-Cash) systems, including the specific ITGCs and automated application controls inherent in complex financial systems.

* Strong expertise with SOX IT control requirements and assessments, either in an external audit capacity or in an internal second line function.

* Direct experience or deep theoretical knowledge of Internal Controls Related to Generative AI, including the risks associated with Large Language Models (LLMs) and automated workflows

* Proven ability to manage audit execution tasks, walkthrough facilitation, control testing support, and deficiency remediation.

* Exceptional communication skills, with the ability to clearly articulate complex audit and compliance issues to both technical and non-technical audiences.

* Demonstrated ability to work effectively as an individual contributor, managing multiple projects and deadlines autonomously.

* Experience partnering directly with external and internal audit teams.

Preferred Qualifications

* Relevant certifications such as CISA, CISSP, or CRISC are preferred. Additional certifications or coursework in AI Risk Management or AI Ethics is highly desirable..

* Previous experience assessing or implementing IT controls around Salesforce products is a plus.

* Familiarity with GRC tools and platforms (e.g., Service Now GRC, Audit Board).

* LI-Y

Unleash Your Potential

When you join Salesforce, you'll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our…