Senior Manager, Technology Risk and Controls

Senior Manager, Technology Risk and Controls

Salesforce is seeking a Senior Manager, Technology Risk and Controls to join the Digital Enterprise Technology (DET) team. This individual contributor role will serve as a pivotal part of the second line of defense within the Governance pillar, focusing on managing and maturing the SOX IT control environment. The manager will ensure the ongoing execution, effectiveness, and readiness of DET's SOX IT controls, acting as the primary liaison among internal control owners, external audit partners, and internal audit teams.

• Lead the execution of annual SOX audit activities for Revenue processes, coordinating with internal and external audit partners to address questions and support needs promptly, and assessing the impact of AI/ML models on financial reporting.
• Serve as the central point of contact for DET Revenue technology teams, clarifying responsibilities related to control execution, audit walkthrough preparation, and evidence collection.
• Partner with Revenue control owners to track, manage, and facilitate the remediation of SOX audit findings or control deficiencies, proactively identifying risks from algorithmic bias, data integrity, and model drift.
• Build and maintain collaborative relationships with cross‑functional partners such as Internal Audit, Finance, Security, and DET Revenue technology teams to align on system scoping and control approaches.
• Identify opportunities to optimize and standardize controls across the DET control landscape to increase efficiency, reduce manual effort, and strengthen overall control posture.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field, or comparable professional experience.
• 7+ years of experience in IT audit, risk and control, or related field, ideally within a large global technology organization.
• Deep subject matter expertise supporting Revenue Cycle (Quote‑to‑Cash) systems, including ITGCs and automated application controls inherent in complex financial systems.
• Strong expertise with SOX IT control requirements and assessments, either externally or in an internal second‑line role.
• Direct knowledge of internal controls related to Generative AI, including risks of large language models and automated workflows.
• Proven ability to manage audit execution tasks, walkthrough facilitation, control testing support, and deficiency remediation.
• Exceptional communication skills, able to articulate complex audit and compliance issues to both technical and non‑technical audiences.
• Demonstrated ability to work independently, managing multiple projects and deadlines autonomously.
• Experience partnering directly with external and internal audit teams.

• Relevant certifications such as CISA, CISSP, or CRISC, or coursework in AI Risk Management or AI Ethics.
• Experience assessing or implementing IT controls around Salesforce products.
• Familiarity with GRC tools and platforms, e.g., Service Now GRC, Audit Board.

Requests for reasonable accommodation during the application or recruiting process can be submitted via the accommodations request form.

Salesforce is an equal‑opportunity employer and maintains a policy of non‑discrimination with all employees and applicants for employment. We evaluate all employees and applicants on merit, qualifications, and competence without regard to race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, disability, or other protected classifications.

Salesforce offers benefits such as time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.