Security Risk Operations Lead

Salesforce•McLean, VA

6d•$172,500 - $260,100•Hybrid

About The Position

The Security Risk Operations Lead will drive execution, maturity, and continuous improvement of Salesforce’s security risk management programs. The role owns cross-functional projects, operational workflows, and stakeholder engagement, and helps shape the Risk Operations operating model by translating risk goals into clear initiatives and scalable processes. The position works with security leaders, program owners, engineering teams, and governance partners in an engineering-first culture that emphasizes version control, code review, automation, and outcomes. The role is based in Bellevue, Washington, or McLean, Virginia, and is eligible for a hybrid work arrangement.

Requirements

8 or more years of experience in governance, risk, and compliance (GRC), information security risk management, or a related area, including leading cross-functional projects.
Understanding of security risk management, including risk assessments, security findings, policy exceptions, risk acceptance, remediation, and risk governance.
Ability to manage priorities, dependencies, and deliverables and take initiatives from planning through implementation.
Clear communication skills and the ability to influence cross-functional teams, drive accountability, and support risk-based decisions.
Ability to design and improve GRC processes with an emphasis on efficiency, scalability, and automation.
Experience using GRC platforms, operational metrics, and reporting to identify risk and support leadership decisions.
Ability to take ownership, handle ambiguity and competing priorities, and deliver in a fast-paced environment.

Nice To Haves

Experience turning security, risk, regulatory, or compliance requirements into technical implementation requirements.
Knowledge of security controls and frameworks such as NIST frameworks, ISO 27001, SOC, SOX, or FedRAMP.
Familiarity with AI security, AI governance, privacy, and evolving global technology regulations.
Experience in an engineering-first environment and interest in building skills on the engineering side of assurance.

Responsibilities

Coordinate timely risk reviews, approvals, and escalations, providing decision-makers with the information needed to act.
Drive cross-functional projects and strategic initiatives, managing priorities, milestones, dependencies, and deliverables.
Own and improve security issue management, policy exception, risk acceptance, and remediation workflows.
Partner with security, engineering, compliance, and business teams to align priorities, conduct risk reviews, clear blockers, and drive decisions.
Build scalable processes, operating standards, and escalation paths, and hold teams accountable for remediation commitments and risk disposition.
Define and improve metrics, dashboards, and leadership reports covering risk exposure, remediation progress, exception trends, and program effectiveness.
Work with engineering and platform teams to reduce manual work and build automated workflows.