Security GRC Analyst

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

About Futureforce University Recruiting

Our Futureforce University Recruiting program is dedicated to attracting, retaining and cultivating talent. Our interns and new graduates work on real projects that affect how our business runs, giving them the opportunity to make a tangible impact on the future of our company. With offices all over the world, our recruits have the chance to collaborate and connect with fellow employees on a global scale. We offer job shadowing, mentorship programs, talent development courses, and much more.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Information Security Associate – Risk Operations

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Who We Are and Where We're Going

Assurance at Salesforce is being rebuilt as an engineering discipline.

Legacy GRC runs on spreadsheets, screenshots, and an annual scramble to prove that controls worked months ago. We're replacing that model with one that is continuous, automated, and built into how Salesforce ships. Controls are code. Evidence comes from pipelines, not people chasing tickets. We work to improve the state of controls, drive decisions with risk, govern with code, and make compliance a streamlined business process.

Our strategy:

Risk-informed, control managed. We monitor, validate, and improve the security controls that stand against threats and failures. This proves trust while delivering risk operations, compliance artifacts, and outputs, and it opens access to new markets through the product we build and the behavior we change.

Visibility and invention. We give Salesforce a clear, current view of its security posture. We equip the Assurance team with a new way of protecting Salesforce, through the invention we create together. We also invest in the people who work here, with room to grow, take on new challenges, and drive excellence.

Always in front. We turn gaps into signals, alerts, and escalations. When a control fails, it flows into a workflow built to help stakeholders meet their trust obligations. Nothing waits for the next audit to surface.

We're hiring people who want to build this future. You'll have real ownership, a real roadmap, and the chance to define what modern assurance looks like for the industry.

What you’ll do …

Risk Operations provides a centralized approach to identifying, prioritizing, and managing cybersecurity risks, driving accountability, faster decision-making, and measurable risk reduction. The team partners across security, engineering, and business functions to streamline risk management processes, improve visibility into risk exposure, and ensure timely escalation and resolution.

We're looking for an Information Security Associate who is excited to help build and support a growing Risk Operations function. In this role, you'll be at the center of day-to-day security issue and exception management activities, helping ensure risk cases are accurately documented, efficiently processed, and consistently tracked through resolution. You'll work closely with experienced risk and security professionals while contributing to the development of workflows, processes, and reporting that will help shape how Risk Operations operates at scale.

This is a great opportunity for an early-career security professional who enjoys solving problems, bringing organization to complex processes, and making a meaningful impact in a fast-paced, evolving environment.

• Rapid Decision Management: We work in a business. Predictability and rapid decisions are the core outcomes you’ll bring to the job. Support rapid risk decision-making by coordinating timely reviews, approvals, and escalations, ensuring decision-makers have the information needed to assess risks and take action.

• Support day-to-day security risk operations by managing the intake, triage, and tracking of security issues and exceptions to accelerate risk-based decisions and timely resolution.

• Coordinate issue and exception management activities , including reviewing submissions for completeness, following up with stakeholders, tracking remediation commitments, monitoring exception expiration dates, and supporting timely case resolution.

• Maintain accurate and complete risk records in case management platforms, ensuring consistent documentation, appropriate case status, and reliable data for operational reporting.

• Partner with security, engineering, and compliance teams to gather information, clarify case requirements, resolve operational blockers, and accelerate risk-based decision-making by ensuring stakeholders have the information, context, and visibility needed to take timely action.

• Support timely risk decisions and escalations by monitoring case progress, identifying stalled requests or decision gaps, and coordinating follow-ups to ensure issues and exceptions move efficiently through established governance and approval workflows.

• Assist with operational reporting and metrics , including tracking case volumes, aging, remediation progress, exception renewals, and other key performance indicators to provide visibility into risk operations activities.

• Identify opportunities to improve efficiency and automate repetitive tasks , helping streamline case handling, improve data quality, and enhance the overall stakeholder experience.

• Contribute to broader Risk Operations initiatives by supporting ad hoc requests, process improvements, and emerging operational needs as the team establishes and matures its capabilities.

What you bring ...

• You have +2 years of experience in information security or security operations, or a related field.

• You have a foundational understanding of information security concepts, including security findings, risk remediation, policy exceptions, and risk acceptance.

• You have sufficient technical ability to serve as one of many eyes as we assess the certainty of our compensating controls and exposures.

• You are highly organized, detail-oriented, and comfortable managing multiple cases, deadlines, and follow-up activities while maintaining accurate records.

• You bring strong analytical and problem-solving skills, with the ability to review information for completeness, identify inconsistencies, and recognize when issues require additional attention or escalation.

• You have strong written and verbal communication skills and enjoy collaborating with cross-functional stakeholders to gather information, clarify requirements, and drive timely follow-through.

• You are comfortable learning new tools, navigating workflow or ticketing systems, and working with spreadsheets and da