Technical Lead (Compliance Engineering & Automation)

Responsibilities Salesforce is seeking a Technical Lead of Compliance Engineering to lead the design, deployment, and scaling of compliance automation within Product Security This is a hands‑on engineering role for someone who treats compliance requirements as specifications — and builds systems to satisfy them continuously, not periodically You will own the technical roadmap for encoding our Common Controls Framework (CCF) control environment as software: automated evidence pipelines, policy‑as‑code enforcement, continuous control testing, and agentic workflows that replace manual audit processes. Your goal is to shift compliance left — embedding it into engineering systems rather than layering it on top Design and ship a compliance‑as‑code platform that encodes CCF controls as versioned, testable, auditable policy artifacts — moving from document‑driven compliance to code‑driven compliance with a CI/CD‑native workflow Lead a program along with a team of compliance engineers to build automated evidence collection pipelines that continuously gather, validate, and normalize control evidence from disparate systems (identity, cloud infra) without human touch Architect and operate continuous control monitoring — real‑time dashboards backed by authoritative data pipelines, not point‑in‑time snapshots — giving engineering and leadership live visibility into control health and drift Deploy agentic automation (Agentforce, Claude) to handle repeatable compliance lifecycle tasks: evidence mapping, audit inquiry drafting, gap analysis, and discrepancy resolution across integrated systems Own the engineering standards and code review culture for compliance artifacts — treating policies, control definitions, and evidence schemas as production code Partner with compliance, product and engineering as a technical counterpart: translate control requirements into precise data contracts and machine‑readable policy definitions that drive automated testing rather than manual review Benefits Medical Care Life Insurance Retirement Savings Employee Assistance Programs With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year Qualifications & Experience Familiarity with agentic or LLM‑based workflows for automating unstructured tasks (inquiry response, evidence summarization, anomaly triage) Engineering‑led approach to audit: you’ve replaced manual evidence collection with automated pipelines and can articulate how those systems satisfy auditor scrutiny Hands‑on experience building automation with Apex and/or Java, Python, SQL, and SOQL; comfortable reading and writing production‑grade code, not just directing others Experience building data pipelines and APIs that normalize compliance‑relevant telemetry from multiple enterprise systems into a unified, queryable source of truth Deep familiarity with security control frameworks — specifically the ability to translate control language into testable, automatable specifications 8+ years in compliance engineering, security engineering, or software engineering — with 3+ years leading technical teams building compliance or security automation systems Experience with Compliance as Code or Policy as Code frameworks (OPA/Rego, Cedar, or similar); comfort expressing control logic as versioned, testable code Proficiency with the Salesforce platform and KARL for building compliance automation on native infrastructure Experience with shift‑left compliance — integrating control gates into CI/CD pipelines, PRs, or infrastructure provisioning workflows rather than post‑deployment audits Experience fine‑tuning or prompt‑engineering LLMs for structured compliance tasks: evidence mapping, natural language control summaries, or audit response generation Tableau or similar for compliance reporting — built by data engineers, consumed by auditors and executives Salesforce Certified Technical Architect (CTA), CISSP, or CISM #J-18808-Ljbffr Salesforce