Manager - Governance, Risk and Compliance Security Automation

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword - it's a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Location:

Bellevue, San Francisco or Mc Lean

Salesforce is seeking a Manager of Governance, Risk and Compliance Security Automation to lead the design, deployment, and scaling of compliance automation capabilities within Security. This role combines technical product leadership with hands‑on engineering execution, and is built for someone who views regulatory compliance and governance as a systems‑engineering challenge rather than a manual checklist.

You will own the strategic roadmap for automating compliance workflows across our Common Controls Framework (CCF) control environment and execute high‑impact initiatives while building and leading a team of engineers. Your primary objective is to institutionalize engineering‑driven compliance – replacing traditional manual efforts with automated solutions for control execution, audit facilitation, and continuous reporting.

• Define and execute a strategic roadmap to automate manual compliance work streams, engineering scalable processes that align with enterprise risk priorities and key business targets.
• Lead a specialized team of compliance engineers and product specialists, establishing technical standards and an engineering culture to modernize controls within the Security environment.
• Architect and deploy an end‑to‑end agentic ecosystem to autonomously manage the compliance lifecycle, transitioning from manual evidence collection to automated execution and audit facilitation.
• Collaborate with audit partners, governance, and engineering teams to ensure automation solutions meet rigorous compliance standards, and own cross‑functional integrations that normalize compliance data across enterprise domains.

• 8+ years of experience in Governance, Risk, and Compliance (GRC), Cybersecurity, or Software Engineering, including 3+ years leading technical teams or managing complex product initiatives.
• Proven ability to design enterprise‑level automation tools and API integrations, with proficiency in Apex and/or Java, Salesforce Object Query Language (SOQL), SQL, and Python.
• Extensive experience evaluating security control effectiveness and translating complex data into technical requirements to build automated solutions that satisfy Payment Card Industry (PCI) and Service Organization Control 2 (SOC
  2) audit scrutiny.
• Track record of delivering real‑time dashboards and automated reporting that transform raw system data into an executive‑level source of truth for continuous risk oversight.

• Experience with the Salesforce platform, including Salesforce Platform development or similar compliance automation systems.
• Familiarity with agentic frameworks to automate complex workflows, synthesize unstructured data, and resolve integration discrepancies between disparate systems.
• Experience fine‑tuning or prompting Large Language Models (LLMs) to automate audit inquiry responses, evidence mapping, or natural language reporting.
• Advanced technical or security certifications such as Salesforce Certified Technical Architect (CTA), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM).

In the United States, compensation offered will be determined by factors such as location, job level, job‑related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. The typical base salary range for this position is $148,500 – $223,900 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $178,900 – $246,000 annually.

The range represents base salary only, and does not include company bonus,…