Senior Security Governance Engineer

Salesforce

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Seattle, WAMcLean, VASan Francisco, CA
Salary
$148,500–$223,900 / yr
Employment
Full-time
Posted
5 days ago
Freshness
Confirmed live yesterday
Closes
Nov 30, 2026

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $188k
This role $186k
$133k $246k
below market most similar roles pay here above market

This role pays more than 51% of similar roles. Most pay $158,625–$216,600 — the blue band above. At the midpoint, this role pays about $186k versus about $188k for comparable roles.

Based on 240 similar postings.

Employer

About Salesforce

Salesforce is the world''s leading customer relationship management (CRM) platform, offering cloud-based software for sales, service, marketing, analytics, and application development. Industry: Enterprise Software & Cloud Computing

Salesforce currently has 268 open roles on FindRole.

Listed pay typically runs $148,500–$260,100 across 130 roles with salary data.

Most-posted roles

View all roles at Salesforce

At a glance

TL;DR · Senior Security Governance Engineer

The Sr. Security Governance Engineer joins the Assurance team to transition legacy governance into an automated engineering discipline where controls are treated as code. You will translate enterprise security policies, regulatory requirements, and risk expectations into measurable, technically actionable controls integrated into engineering workflows. Responsibilities include developing security policies, managing the policy lifecycle, and defining machine-readable requirements using tools like OPA/Rego or cloud-native policy frameworks. You will act as a subject matter expert for domains such as IAM, Cloud, and Data Protection, ensuring traceability from regulations to implementation. Required skills include 7+ years in information security governance, familiarity with NIST CSF, ISO 27001, and SOC 2, and knowledge of cloud security across AWS, Azure, or GCP. This role solves the problem of manual, reactive auditing by building continuous, scalable governance.

What you'll do

  • Translate enterprise security policies and regulatory requirements into measurable, technically actionable controls.
  • Develop and maintain security policies, technical standards, and control requirements.
  • Manage the policy lifecycle including versioning, approvals, exceptions, and change management.
  • Define machine-readable policy and control requirements for Governance-as-Code initiatives.
  • Maintain a common control framework with clear objectives, ownership, and validation criteria.
  • Act as the Subject Matter Expert for assigned domains like IAM, Cloud, or Data Protection.
  • Interpret regulations to assess gaps, exceptions, and emerging risks while recommending improvements.
  • Provide a governance perspective during architecture and design discussions with engineering teams.

What we're looking for

  • U.S. Citizenship or Permanent Residency is required.
  • 7+ years of experience in information security governance, security engineering, technology risk, or related functions.
  • Strong grasp of security policies, standards, control frameworks, and governance processes.
  • Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
  • Ability to translate regulatory and security requirements into measurable control objectives.
  • Working knowledge of cloud security (AWS, Azure, or GCP), IAM, application, infrastructure, and data security.
  • Understanding of control design (preventive and detective), risk assessment, and exception management.
  • Familiarity with modern development practices, cloud environments, and CI/CD.
  • Strong analytical, communication, documentation, and stakeholder-management skills.
  • Experience with Governance-as-Code or Policy-as-Code and engines like OPA/Rego or HashiCorp Sentinel (preferred).
  • Familiarity with YAML, JSON, Git, infrastructure-as-code, and DevSecOps (preferred).
  • Experience with GRC platforms, Common Controls Frameworks (CCF), and OSCAL (preferred).
  • Exposure to security posture management, compliance validation, architecture reviews, or AI governance (preferred).

More like this

Similar roles

Security Governance Engineer, Secure, Build & Change

Salesforce

Bellevue, WA +3 5 days ago $117,200–$176,700
Governance-as-Code Policy-as-Code OPA Rego HashiCorp Sentinel AWS Azure GCP IAM CI/CD DevSecOps NIST CSF NIST SP 800-53 ISO 27001 SOC 2 PCI DSS YAML JSON Git Infrastructure-as-Code OSCAL GRC Platforms
2+ yrs exp Hybrid

Lead Engineer, Cloud Security

Target

Brooklyn Park, MN 8 days ago $132,000–$238,000
GCP AWS Azure Cloud Security Kubernetes CI/CD APIs Infrastructure as Code CSPM CNAPP NIST CIS Benchmarks ISO/IEC 27001 CSA CCM policy-as-code Observability Data Pipelines Source Control
7+ yrs exp Hybrid

Senior Security Engineer, Detection & Response

Robinhood

Bellevue, WA +2 47 days ago $187,000–$220,000
Incident Response Detection Engineering Kubernetes SOAR AI Threat Hunting Threat Intelligence Vulnerability Management Blockchain DeFi
5+ yrs exp Hybrid

Senior Manager, Security Engineering - Engineer

Uber

Seattle, WA 29 days ago
Detection Engineering SIEM EDR Kafka Flink Elastic Splunk CrowdStrike SentinelOne Wiz Okta Torq AWS GCP OCI ML LLM MITRE ATT&CK NIST CSF ISO 27001 SOC 2 Detection-as-Code
10+ yrs exp Hybrid