Manager/Senior Manager -Global Cloud Compliance (FedRAMP)

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

Manager/Senior Manager -Global Cloud Compliance (FedRAMP)

About Salesforce
 

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM+Trust. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place!

About Our Team

The Global Compliance and Certification (GCC) team is responsible for enterprise wide compliance processes, ensuring Salesforce leadership has the information needed to make strategic risk-based decisions. You will report directly to the Vice President of GCC, a division within the Product Security Organization and you will play a pivotal role in driving and overseeing cloud security compliance that support Salesforce’s federal and government customers, including U.S. Federal agencies.

Impact - Responsibilities

• Compliance Oversight: Establish and govern a common controls strategy to ensure security and compliance across Salesforce’s environments.

• Risk & Audit Management: Oversee internal security audits, risk assessments, and mitigation plans, ensuring timely remediation of high-risk systems. This includes reviewing the strategy and monthly con-mon submissions and identifying dependencies, areas of improvement, and efficiencies. 

• Stakeholder Collaboration: Partner with cross-functional teams, including product security, engineering, legal, and external regulatory bodies, to align compliance initiatives with business objectives.

• Build and Maintain External Partnerships: Maintain and lead partnerships with various agencies (DoD, VA, etc.) and the FedRAMP PMO, staying atop of all industry updates and changes to the program.
  Process Optimization: Drive efficiencies in compliance assessments, including the implementation of innovative approaches to meet and exceed security requirements.
  Incident Response & Threat Management: Provide executive-level guidance on incident response and security forensics, ensuring alignment with compliance frameworks.
  Policy & Governance: Lead the development of security policies, procedures, and reporting mechanisms to meet global regulatory and customer requirements.

Minimum Qualifications

• Strong Established Partnerships and connections with key federal agencies and the FedRAMP PMO governing body.

• 7- 10  years of experience in cybersecurity, cloud compliance, or risk management, with a focus on regulatory frameworks.

• Experience working with Government Cloud environments such as AWS, Azure, GCP (SaaS, IaaS, PaaS etc)

• Knowledge of multiple regulatory compliance frameworks (NIST CSF & 800-53, ISO27001, SOC, HITRUST, HIPAA, FedRAMP, DOD SRG IL4/IL5, PCI, etc.)

• Proven leadership experience in driving enterprise-wide compliance strategies and cross-functional initiatives.

• Exceptional ability to communicate and influence stakeholders at all levels, including senior executives.

• Industry certifications such as CISA, CISSP, CCSK, or equivalent are highly desirable.
   

Required Qualifications

• Experience working with the FedRAMP PMO, FedRAMP JAB, and DISA Cloud Assessment Division

• Strong Understanding of application architectures, design principles, comm