Information Security Senior Associate
Salesforce · Posted Nov 1
Customer relationship management, cloud computing, enterprise software, and artificial intelligence solutions
Get a personal compatibility score
Add a resume for personal matches
About the role
Salesforce Assurance is rebuilding assurance as an engineering discipline, replacing spreadsheet-based GRC with continuous, automated controls embedded in how Salesforce ships. The team monitors and improves security controls, provides visibility into security posture, and turns control gaps into alerts and workflows. This role supports vendor risk and security by triaging third-party security assessment cases in ProcessUnity, reviewing supplier questionnaire responses, tracking subprocessor reviews, and collecting evidence for audit readiness.
What you will do
- Triage and track Third-Party Security Assessment (TPSA/TPSD) cases in ProcessUnity from intake to closure, including supplier follow-up questions.
- Do first-pass review of supplier questionnaire responses against a documented rubric, and escalate exceptions to the senior reviewer.
- Support subprocessor security reviews with documentation review and status tracking. Several of these run at once, and some are tied to go-live or code-freeze dates.
- Collect and organize evidence for audit readiness
- Maintain intake hygiene in ProcessUnity: bulk imports of new supplier TPSAs, templates and intake fields for new supplier categories, and consistency across cases.
- Chase outstanding evidence and documentation from vendors and internal stakeholders.
- Help with adjacent vendor compliance work, such as BPO questionnaire follow-ups and security-training content.
Skills used in this role
What the employer is looking for
- Interest in third-party risk, vendor security, or security compliance. A security background is helpful but not required.
- Strong written communication. You will send many follow-ups and need to state exactly what is missing.
- Attention to detail when reading questionnaire answers line by line.
- Ability to manage many open cases and deadlines without dropping follow-ups.
- Willingness to escalate when an answer looks wrong or incomplete.
- Experience with a GRC or case-management tool (ProcessUnity or similar).
- Familiarity with security questionnaires or frameworks (SIG, CAIQ, SOC 2, ISO 27001).
- Prior audit-support or compliance-coordination experience.
Benefits and support
- Compensation and benefits are detailed in the job posting
About Salesforce
Salesforce, Inc. is a leading global cloud-based enterprise software company specializing in customer relationship management (CRM) and artificial intelligence solutions. Through its integrated Customer 360 platform, the company provides applications for sales, customer service, marketing automation, e-commerce, and analytics. Powered by innovations like Agentforce, Salesforce helps businesses bridge human capability with autonomous AI agents to drive customer success.
- Industry
- Cloud Computing
- Company size
- 87000+ employees
- Founded
- 1999
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $25B raised
- 2026-03Post-IPO Debt$25B
- 2003-01Venture Round$1M
- 2001-06Series D$46.9M
- 1999-11Series C$13.2M
- 1999-06Series B$3.8M
Leadership
Chair, Chief Executive Officer & Co-Founder
President & Chief Operating and Financial Officer
Co-Founder & Chief Technology Officer, Slack
President & Chief Strategy Officer
Recent coverage
Marketing Report
Salesforce Unveils New D.C. Innovation Hub to Expand Public Sector Presence2026-10-30
Futurum Group
Salesforce Expands MuleSoft’s Agent Fabric with Production Evaluation and AI Cost Controls2026-10-30
Resilience Media
Salesforce Acquires Defense Tech Startup Rune Technologies for $375 Million2026-10-30