Security Risk Operations Lead

Salesforce•Bellevue, WA

4d•Hybrid

About The Position

Salesforce is hiring a Security Risk Operations Lead to drive the execution, maturity, and continuous improvement of its security risk management programs. The role owns cross-functional projects, operational workflows, and stakeholder engagement, and helps shape the Risk Operations operating model by turning risk goals into clear initiatives and scalable processes. The successful candidate will work with security leaders, program owners, engineering teams, and governance partners to advance a roadmap for modern assurance in an engineering-first culture that values version control, code review, automation, and outcomes. The role is based in Bellevue, Washington, or McLean, Virginia, and is eligible for a hybrid work arrangement. Salesforce describes its benefits as including time off programs, medical, dental, and vision coverage, mental health support, paid parental leave, life and disability insurance, a 401(k), and an employee stock purchasing program. The typical annual base salary range is $172,500–$260,100; this range excludes bonus, equity, and benefits, as applicable.

Requirements

At least 8 years of experience in governance, risk, and compliance (GRC), information security risk management, or a related area, including leading cross-functional projects.
Understanding of security risk management, including risk assessments, security findings, policy exceptions, risk acceptance, remediation, and risk governance.
Ability to manage priorities, dependencies, and deliverables and take initiatives from planning through implementation.
Clear communication skills and ability to influence cross-functional teams, drive accountability, and support risk-based decisions.
Ability to design and improve GRC processes with a focus on efficiency, scalability, and automation.
Experience using GRC platforms, operational metrics, and reporting to identify risk and support leadership decisions.
Ability to take ownership, handle ambiguity and competing priorities, and deliver in a fast-paced environment.

Nice To Haves

Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
Knowledge of security controls and frameworks such as NIST frameworks, ISO 27001, SOC, SOX, or FedRAMP.
Familiarity with AI security, AI governance, privacy, and evolving global technology regulations.
Experience in an engineering-first environment and interest in building engineering-side assurance skills.

Responsibilities

Coordinate timely risk reviews, approvals, and escalations, providing decision-makers with information needed to act.
Lead cross-functional projects and strategic initiatives, managing priorities, milestones, dependencies, and deliverables.
Own and improve workflows for security issue management, policy exceptions, risk acceptance, and remediation.
Partner with security, engineering, compliance, and business teams to align priorities, run risk reviews, clear blockers, and drive decisions.
Build scalable processes, operating standards, and escalation paths, and hold teams accountable for remediation commitments and risk disposition.
Define and improve metrics, dashboards, and leadership reports covering risk exposure, remediation progress, exception trends, and program effectiveness.
Identify opportunities to reduce manual work and build automated workflows with engineering and platform teams.