Compliance Architect

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Enterprise Technology & Infrastructure

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

Job Title: Compliance Architect

Location: San Francisco, USA

Department: Global Compliance Certifications

About Our Team

The Global Compliance and Certification (GCC) team is responsible for enterprise wide compliance processes, ensuring Salesforce leadership has the information needed to make strategic risk-based decisions. You will report directly to the Vice President of GCC, a division within the Product Security Organization, and will play a pivotal role in driving and overseeing cloud security compliance that support Salesforce’s products. 

About the Role

We are seeking a forward-thinking Compliance Architect to lead the design and engineering of AI-powered solutions that transform traditional compliance workflows—ranging from audits and risk assessments to policy lifecycle management. This is a high-impact, cross-functional role that blends deep regulatory expertise with modern engineering principles to enable scalable, intelligent, and adaptive compliance systems. 
 

Impact - Responsibilities

• AI Architecture & Engineering

  • Design AI agents to streamline compliance operations such as audit preparation, evidence gathering, risk assessments, and control testing.

  • Define the architecture for autonomous and human-in-the-loop workflows for ongoing compliance monitoring and remediation.

  • Partner with Automation-dev teams to ensure model outputs are explainable, governed, and auditable.

• Process Re-Engineering

  • Reimagine traditional GRC processes using intelligent automation and agent-based task orchestration.

  • Develop compliance workflows that integrate with internal systems (e.g., GRC platforms, cloud platforms, CMDBs, ticketing systems).

• Policy & Standards Lifecycle

  • Build mechanisms to continuously ingest, analyze, and recommend updates to internal policies and external regulatory mappings using NLP-driven agents.

  • Develop agents that provide proactive compliance alerts based on changes in policy, regulatory obligations, or internal controls.

• Compliance Data Architecture

  • Work with data engineering teams to define the compliance data model needed to support AI/ML-enabled risk analytics and dashboards.

  • Ensure data used in training models complies with privacy, governance, and security standards.

• Collaboration & Governance

  • Collaborate with compliance, legal, and engineering teams to ensure accuracy, defensibility, and regulatory alignment.

  • Participate in governance councils to advise on the ethical and effective use of AI in regulated environments.
     

Qualifications:

Required:

• Bachelor’s or Master’s degree in Computer Science, Engineering, Information Security, or related field experience.

• 7+ years of experience in compliance, GRC, security engineering, or AI/ML-based systems.

• Strong understanding of regulatory frameworks (e.g., ISO 27001, NIST, FedRAMP, SOC 2, GDPR).

• Experience with AI/ML platforms, orchestration tools, or intelligent automation frameworks (e.g., LangChain, RPA, LLM APIs, GRC tools).

• Proficiency in Python or similar languages used for automation and data workflows.
   

Preferred:

• Experience designing systems that support audit, policy lifecycle, or ri