**
S&P Global is seeking a Lead for its Salesforce Compliance & Security team, responsible for enhancing the compliance, security, and resilience of the Salesforce ecosystem. The role emphasizes collaboration with various stakeholders to implement scalable controls and improve operational standards.
**
Job Summary
The Salesforce Compliance & Security team is responsible for defining, operating, and continuously improving the control, security, and resilience posture of S&P Global’s Salesforce ecosystem across multiple orgs and divisions.
In this role, you will directly shape how S&P Global manages compliance, security, and resilience for one of its most critical enterprise platforms, ensuring Salesforce environments meet regulatory, audit, and cyber requirements.
Our benefits include Health & Wellness, Flexible Downtime, Continuous Learning, Invest in Your Future, and Family Friendly Perks.
Matching Summary
Match Score: 75
**
S&P Global is seeking a Lead for its Salesforce Compliance & Security team, responsible for enhancing the compliance, security, and resilience of the Salesforce ecosystem. The role emphasizes collaboration with various stakeholders to implement scalable controls and improve operational standards.
**
Skills & Requirements
Must-have
Salesforce compliance control framework
audit readiness and remediation governance
access governance and least-privilege
Salesforce security standards
incident response and resilience
automation of evidence and reporting
Nice-to-have
operational rigor and transparency
collaboration and documentation
continuous improvement mindset
business-friendly language
influential cross-functional alignment
Key Requirements
Bachelor’s degree or equivalent relevant experience
5+ years of experience in business analysis, platform operations, security/compliance, risk management, audit support
Demonstrated understanding of compliance and control concepts (e.g., SOX, ITGC)
Familiarity with access governance and least-privilege principles
Ability to work effectively with Salesforce security/access constructs