below marketmost similar roles pay hereabove market
This role pays less than
60%
of similar roles. Most pay
$127,500–$186,600
— the blue band above.
At the midpoint, this role pays about
$147k
versus about
$157k
for comparable roles.
Based on 240 similar postings.
Employer
About Salesforce
Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing
Salesforce currently has
264 open roles
on FindRole.
Listed pay typically runs
$148,500–$260,100
across 131 roles with salary data.
The Security GRC Analyst, Forward Deployed Assurance joins the Assurance team to serve as a technical liaison between Security and Engineering. This role involves bridging the gap between compliance requirements and practical implementation by evaluating how security controls are designed, operated, and scaled across applications, platforms, and cloud environments. You will translate regulatory expectations into actionable technical requirements, perform second-line oversight, and assess risk during M&A activities. Key responsibilities include monitoring compliance frameworks like NIST, ISO 27001, SOC, SOX, and FedRAMP, while addressing emerging areas like AI governance and the EU AI Act. The role requires expertise in security engineering, IAM, and platform engineering to ensure that governance is integrated into the software development lifecycle and that controls are technically relevant and operational.
Translate regulatory and compliance expectations into actionable technical requirements for engineering teams.
Evaluate how security controls are designed, implemented, and scaled across cloud and infrastructure environments.
Act as a technical liaison between Assurance, Engineering, Product Security, and Legal departments.
Execute second-line oversight protocols to independently monitor and audit security control operations.
Identify friction points in control implementation and provide feedback to refine governance processes.
Assess risk exposure and compatibility during mergers and acquisitions to create activation plans.
Monitor emerging global regulations, including AI governance, to identify organizational implications.
Participate in control incident reviews to perform root-cause analysis and track remediation efforts.
What we're looking for
U.S. Citizenship or Permanent Residency is required.
2-3 years of relevant experience or technical background in security engineering, cloud security, product security, IAM, platform engineering, or IT governance.
Ability to understand complex systems, architectures, APIs, infrastructure, cloud environments, and software development processes.
Experience translating security, risk, regulatory, or compliance requirements into technical implementation requirements.
Strong understanding of security controls and frameworks such as NIST, ISO 27001, SOC, SOX, FedRAMP, or similar frameworks.
Familiarity with emerging technology and regulatory areas such as AI security, AI governance, privacy, and evolving global technology regulations.
Strong communication skills to explain technical details to governance teams and translate governance expectations for Engineering teams.
Experience with independent control testing, assurance or audit practices, incident or root-cause analysis, or M&A due diligence (preferred).