Security GRC Analyst

Job Title: Security GRC Analyst Company: Salesforce Job Category: Salesforce Roles & Responsibilities: Ready to level\-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. Ready to level\-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. Risk\-informed, control managed. We monitor, validate, and improve the security controls that stand against threats and failures. This proves trust while delivering risk operations, compliance artifacts, and outputs, and it opens access to new markets through the product we build and the behavior we change. Risk Operations provides a centralized approach to identifying, prioritizing, and managing cybersecurity risks, driving accountability, faster decision\-making, and measurable risk reduction. The team partners across security, engineering, and business functions to streamline risk management processes, improve visibility into risk exposure, and ensure timely escalation and resolution. We're looking for an Information Security Associate who is excited to help build and support a growing Risk Operations function. In this role, you'll be at the center of day\-to\-day security issue and exception management activities, helping ensure risk cases are accurately documented, efficiently processed, and consistently tracked through resolution. You'll work closely with experienced risk and security professionals while contributing to the development of workflows, processes, and reporting that will help shape how Risk Operations operates at scale. * Rapid Decision Management: We work in a business. Predictability and rapid decisions are the core outcomes you’ll bring to the job. Support rapid risk decision\-making by coordinating timely reviews, approvals, and escalations, ensuring decision\-makers have the information needed to assess risks and take action. * Support day\-to\-day security risk operations by managing the intake, triage, and tracking of security issues and exceptions to accelerate risk\-based decisions and timely resolution. * Coordinate issue and exception management activities , including reviewing submissions for completeness, following up with stakeholders, tracking remediation commitments, monitoring exception expiration dates, and supporting timely case resolution. * Maintain accurate and complete risk records in case management platforms, ensuring consistent documentation, appropriate case status, and reliable data for operational reporting. * Partner with security, engineering, and compliance teams to gather information, clarify case requirements, resolve operational blockers, and accelerate risk\-based decision\-making by ensuring stakeholders have the information, context, and visibility needed to take timely action. * Support timely risk decisions and escalations by monitoring case progress, identifying stalled requests or decision gaps, and coordinating follow\-ups to ensure issues and exceptions move efficiently through established governance and approval workflows. * Assist with operational reporting and metrics , including tracking case volumes, aging, remediation progress, exception renewals, and other key performance indicators to provide visibility into risk operations activities. * Identify opportunities to improve efficiency and automate repetitive tasks , helping streamline case handling, improve data quality, and enhance the overall stakeholder experience. * Contribute to broader Risk Operations initiatives by supporting ad hoc requests, process improvements, and emerging operational needs as the team establishes and matures its capabilities. * You have \+2-3 years of experience in information security or security operations, or a related field. * You have a foundational understanding of information security concepts, including security findings, risk remediation, policy exceptions, and risk acceptance. * You have sufficient technical ability to serve as one of many eyes as we assess the certainty of our compensating controls and exposures. * You are highly organized, detail\-oriented, and comfortable managing multiple cases, deadlines, and follow\-up activities while maintaining accurate records. * You bring strong analytical and problem\-solving skills, with the ability to review information for completeness, identify inconsistencies, and recognize when issues require additional attention or escalation. * You have strong written and verbal communication skills and enjoy collaborating with cross\-functional stakeholders to gather information, clarify requirements, and drive timely follow\-through. * You are comfortable learning new tools, navigating workflow or ticketing systems, and working with spreadsheets and data to support operational activities. * You are adaptable, proactive, and comfortable working in an evolving environment where processes and responsibilities are still being established. * You have a continuous improvement mindset and are eager to learn, contribute ideas, and help build scalable and efficient security risk management practices. * Engineering\-first culture. We use version control, code review, CI/CD, and backlogs. Assurance work ships like software. * Automate first. If it's done manually twice, it's a candidate for a build. * Signals, not surprises. Gaps become alerts and workflows, and control failures resolve through defined escalation paths. * Embedded partners. We work alongside T\&P teams and solve problems with them, not at them. * Outcomes over activity. We measure risk reduced, effort saved, and audit friction removed. * Room to grow. Learn the engineering side if you come from GRC, or the risk side if you come from engineering. We support both paths. Work Location: Telangana, India Availability: Full time

Direct experience using and critically reviewing code and artifacts generated by large language model (LLM) coding assistants and agentic tools. Must be able to effectively guide AI tools to achieve desired outcomes. Graduates need direct experience using and critically reviewing code and artifacts generated by large language model (LLM) coding assistants and agentic tools. This is a newer requirement; candidates who have actively experimented with and used tools like Gemini, Cursor, or other agent\-based frameworks will be stronger candidates. FutureForce is for college students or new grads wanting to experience life at Salesforce, one of the World’s Most Innovative Companies 5\-years\-running and one of Fortune’s “100 Best Companies to Work For” 8\- years\-running. FutureForce interns work on live projects, giving them the opportunity to make a tangible impact that they can show to friends, family, and future employers if we don’t hire them first (and, we hire 80% of our eligible interns)! When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best* , and our AI agents accelerate your impact so you can do your best* . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our Candidate Privacy Statement for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Salesforce is an equal opportunity employer and maintains a policy of non\-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education. Key Skills: Salesforce Salary: Not disclosed