Security Grc Senior Lead

Salesforce Salesforce · Enterprise · San Francisco, CA +1

Salesforce is seeking a Security GRC Senior Lead to develop and implement compliance strategies for their global CCaaS platform, focusing on telecommunications regulations and security frameworks. The role involves overseeing regulatory filings, monitoring evolving regulations, and ensuring compliance by design within the product lifecycle.

What you'd actually do

  1. Lead the compliance strategy for our global CCaaS initiatives, translating guidance and requirements into high-level business and product strategy.
  2. Oversee the strategy and governance of mandatory quarterly, annual, and ad hoc regulatory filings to governing bodies (ex., FCC, CRTC), ensuring total accuracy and organizational alignment.
  3. Actively scan and monitor the global telecom and security landscape for new, pending, and evolving regulations, proactively assessing their impact on our product roadmap and global compliance posture.
  4. Act as a key GRC liaison to Product Management and business leadership, ensuring "compliance by design" is embedded in the product lifecycle.
  5. Define and manage the shared responsibility model, clearly delineating telecom and compliance liabilities between our platform, underlying carrier partners, and our customers based on whether they utilize a reseller or BYOC architecture.

Skills

Required

  • 8+ years of experience in Security GRC, Legal, or Regulatory Affairs, preferably within the SaaS, CCaaS, or UCaaS space.
  • Strong working knowledge of international telecommunications regulations and compliance frameworks across North America, Europe, and other emerging global markets.
  • Experience managing or overseeing formal regulatory reporting and filing processes at an enterprise level.
  • Proven ability to translate complex legal/regulatory text into clear requirements for product and business teams.
  • Exceptional executive communication skills, capable of presenting risk scenarios and strategy to senior leadership.

What the JD emphasized

  • global CCaaS platform
  • telecommunications regulations
  • regulatory filings
  • compliance guardrails
  • telecom reporting strategy
  • international telecommunications regulations
  • formal regulatory reporting and filing processes