Security GRC Analyst

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

About Futureforce University Recruiting

Our Futureforce University Recruiting program is dedicated to attracting, retaining and cultivating talent. Our interns and new graduates work on real projects that affect how our business runs, giving them the opportunity to make a tangible impact on the future of our company. With offices all over the world, our recruits have the chance to collaborate and connect with fellow employees on a global scale. We offer job shadowing, mentorship programs, talent development courses, and much more.

About Salesforce

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all.

Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce.

Assurance at Salesforce is being rebuilt as an engineering discipline.

Legacy GRC runs on spreadsheets, screenshots, and an annual scramble to prove that controls worked months ago. We're replacing that model with one that is continuous, automated, and built into how Salesforce ships. Controls are code. Evidence comes from pipelines, not people chasing tickets. We work to improve the state of controls, drive decisions with risk, govern with code, and make compliance a streamlined business process.

Our strategy:

Risk-informed, control managed. We monitor, validate, and improve the security controls that stand against threats and failures. This proves trust while delivering risk operations, compliance artifacts, and outputs, and it opens access to new markets through the product we build and the behavior we change.

Visibility and invention. We give Salesforce a clear, current view of its security posture. We equip the Assurance team with a new way of protecting Salesforce, through the invention we create together. We also invest in the people who work here, with room to grow, take on new challenges, and drive excellence.

Always in front. We turn gaps into signals, alerts, and escalations. When a control fails, it flows into a workflow built to help stakeholders meet their trust obligations. Nothing waits for the next audit to surface.

We're hiring people who want to build this future. You'll have real ownership, a real roadmap, and the chance to define what modern assurance looks like for the industry.

Risk Operations provides a centralized approach to identifying, prioritizing, and managing cybersecurity risks, driving accountability, faster decision-making, and measurable risk reduction. The team partners across security, engineering, and business functions to streamline risk management processes, improve visibility into risk exposure, and ensure timely escalation and resolution.

We're looking for an Information Security Associate who is excited to help build and support a growing Risk Operations function. In this role, you'll be at the center of day-to-day security issue and exception management activities, helping ensure risk cases are accurately documented, efficiently processed, and consistently tracked through resolution. You'll work closely with experienced risk and security professionals while contributing to the development of workflows, processes, and reporting that will help shape how Risk Operations operates at scale.

This is a great opportunity for an early-career security professional who enjoys solving problems, bringing organization to complex processes, and making a meaningful impact in a fast-paced, evolving environment.

• Rapid Decision Management: We work in a business. Predictability and rapid decisions are the core outcomes you’ll bring to the job. Support rapid risk decision-making by coordinating timely reviews, approvals, and escalations, ensuring decision-makers have the information needed to assess risks and take action.
• Support day-to-day security risk operations by managing the intake, triage, and tracking of security issues and exceptions to accelerate risk-based decisions and timely resolution.
• Coordinate issue and exception management activities , including reviewing submissions for completeness, following up with stakeholders, tracking remediation commitments, monitoring exception expiration dates, and supporting timely case resolution.
• Maintain accurate and complete risk records in case management platforms, ensuring consistent documentation, appropriate case status, and reliable data for operational reporting.
• Partner with security, engineering, and compliance teams to gather information, clarify case requirements, resolve operational blockers, and accelerate risk-based decision-making by ensuring stakeholders have the information, context, and visibility needed to take timely action.
• Support timely risk decisions and escalations by monitoring case progress, identifying stalled requests or decision gaps, and coordinating follow-ups to ensure issues and exceptions move efficiently through established governance and approval workflows.
• Assist with operational reporting and metrics , including tracking case volumes, aging, remediation progress, exception renewals, and other key performance indicators to provide visibility into risk operations activities.
• Identify opportunities to improve efficiency and automate repetitive tasks , helping streamline case handling, improve data quality, and enhance the overall stakeholder experience.
• Contribute to broader Risk Operations initiatives by supporting ad hoc requests, process improvements, and emerging operational needs as the team establishes and matures its capabilities.

• You have +2 years of experience in information security or security operations, or a related field.
• You have a foundational understanding of information security concepts, including security findings, risk remediation, policy exceptions, and risk acceptance.
• You have sufficient technical ability to serve as one of many eyes as we assess the certainty of our compensating controls and exposures.
• You are highly organized, detail-oriented, and comfortable managing multiple cases, deadlines, and follow-up activities while maintaining accurate records.
• You bring strong analytical and problem-solving skills, with the ability to review information for completeness, identify inconsistencies, and recognize when issues require additional attention or escalation.
• You have strong written and verbal communication skills and enjoy collaborating with cross-functional stakeholders to gather information, clarify requirements, and drive timely follow-through.
• You are comfortable learning new tools, navigating workflow or ticketing systems, and working with spreadsheets and data to support operational activities.
• You are adaptable, proactive, and comfortable working in an evolving environment where processes and responsibilities are still being established.
• You have a continuous improvement mindset and are eager to learn, contribute ideas, and help build scalable and efficient security risk management practices.

• Engineering-first culture. We use version control, code review, CI/CD, and backlogs. Assurance work ships like software.
• Automate first. If it's done manually twice, it's a candidate for a build.
• Signals, not surprises. Gaps become alerts and workflows, and control failures resolve through defined escalation paths.
• Embedded partners. We work alongside T&P teams and solve problems with them, not at them.
• Outcomes over activity. We measure risk reduced, effort saved, and audit friction removed.
• Room to grow. Learn the engineering side if you come from GRC, or the risk side if you come from engineering. We support both paths.
  

Modern Tooling Acumen:

Direct experience using and critically reviewing code and artifacts generated by large language model (LLM) coding assistants and agentic tools. Must be able to effectively guide AI tools to achieve desired outcomes.

Graduates need direct experience using and critically reviewing code and artifacts generated by large language model (LLM) coding assistants and agentic tools. This is a newer requirement; candidates who have actively experimented with and used tools like Gemini, Cursor, or other agent-based frameworks will be stronger candidates.

About Futureforce

FutureForce is for college students or new grads wanting to experience life at Salesforce, one of the World’s Most Innovative Companies 5-years-running and one of Fortune’s “100 Best Companies to Work For” 8- years-running. FutureForce interns work on live projects, giving them the opportunity to make a tangible impact that they can show to friends, family, and future employers if we don’t hire them first (and, we hire 80% of our eligible interns)!

They have the chance to collaborate and connect with the Salesforce interns from all over the world. And, like all Salesforce employees, interns also have many possibilities to volunteer, making a lasting impact in the community.

FutureForce offers a collaborative work environment, which promotes innovation, provides flexibility and most importantly is fun!

Unleash Your Potential

When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best , and our AI agents accelerate your impact so you can do your best . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.

If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this Accommodations Request Form .

Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options.

Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.