Product Compliance Engineering - Senior Analyst

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action, tech meets trust, and innovation is a way of life. The Global Compliance and Certification (GCC) team ensures enterprise-wide compliance processes, providing leadership with the information needed to make strategic, risk-based decisions. This role partners with engineering to translate complex mandates into actionable controls, driving continuous risk mitigation and adherence to Salesforce security frameworks.

About the role

We're looking for a compliance professional energized by making complex regulatory requirements clear and actionable. You'll work across engineering, security, and external auditors to shape Salesforce’s global compliance posture, gaining deep experience in cloud security frameworks and audit execution at scale.

Responsibilities

• Serve as a cloud compliance subject matter expert, supporting internal and external audits—including leading walkthroughs with external assessors—by ensuring effective control implementation across Salesforce environments aligned with ISO 27001, Service Organization Controls (SOC) 1/2, and other regulatory frameworks.
• Partner with engineering teams to translate complex compliance frameworks and regulatory mandates into clear, actionable deliverables, ensuring timely remediation and clear leadership reporting on progress and residual risk.
• Identify opportunities to streamline and automate evidence collection, document detailed process playbooks, and drive operational efficiency and continuous improvement.
• Collaborate with cross-functional partners to operationalize audit recommendations and enhance overall compliance posture.
• Automate evidence collection and compliance operations to improve efficiency.

Requirements

• 4+ years of experience in IT audit or internal controls, managing global compliance assessments in complex environments with a strong focus on cloud and software-as-a-service (SaaS) platforms.
• Experience with compliance and regulatory standards across industries and geographies, including ISO 27001, SOC, HIPAA, PCI, HITRUST, SOX, and FedRAMP.
• Strong analytical and problem-solving skills with the ability to assess risks, recommend solutions, and work independently in a fast-paced regulatory environment.
• Strong program and stakeholder management experience, including cross-functional leadership, with excellent organizational and documentation skills.

Qualifications

• Experience with compliance tooling, control testing automation, or audit workflow platforms.
• Technical knowledge of hyperscaler environments such as Amazon Web Services (AWS).
• Relevant certifications such as CRISC, CISSP, CISM, or CISA.

Benefits

Salesforce offers a variety of benefits to help you live well, including:

• Time off programs
• Medical, dental, vision, and mental health support
• Paid parental leave
• Life and disability insurance
• 401(k) and employee stock purchasing program

More details about company benefits can be found at Salesforce Benefits.

Pay

The typical base salary range for this position is $117,200 - $176,700 annually. The range represents base salary only and does not include company bonus, incentive for sales roles, equity, or benefits.