Hybrid Global Risk & Compliance Lead

Posted 3 weeks ago

Apply now

About the role

  • Global Risk & Compliance Lead overseeing risk management and compliance for Salesforce solutions in the UK. Collaborating with teams to ensure adherence to regulatory requirements and security standards.

Responsibilities

  • Define and maintain global compliance and risk frameworks for Salesforce implementation and operations
  • Documenting control designs for Sales Enablement processes, ensuring alignment with Crown Jewel Playbook controls (e.g., critical stakeholder inventory, supply chain risk management, risk assessments, data inventory, user access reviews)
  • Project managing dependencies on other teams, such as timely Joiner-Mover-Leaver (JML) feeds from HR, and access reviews by Business Owners
  • Conduct risk assessments to identify, evaluate, and mitigate risks related to Salesforce data, processes, and integrations
  • Develop controls to ensure compliance with internal policies and external regulations
  • Ensure Salesforce configuration and operations comply with global and regional regulations (e.g., GDPR, SOX)
  • Tightening RBAC structures by reviewing and documenting roles, permissions, and access controls, ensuring least privilege and periodic reviews
  • Collaborate with IT Security to design and enforce secure Salesforce configurations (SSO, MFA, RBAC, encryption)
  • Prepare for and respond to cybersecurity incidents within Sales Enablement scope, driving internal innovation to define best practices for securing the domain
  • Define audit-ready processes and provide evidence of compliance for internal and external audits
  • Establish monitoring, logging, and reporting mechanisms for ongoing compliance validation

Requirements

  • ISACA (or equivalent) qualification: Certified Information Systems Auditor (CISA), or Certified Information System Manager (CISM), or Certified Governance of Enterprise IT (CGEIT)
  • 5+ years of experience in risk, compliance, or governance roles, with at least 3 years focused on Salesforce or large-scale SaaS implementations
  • Strong knowledge of global data protection regulations (GDPR) and industry compliance frameworks (SOX, ISO 27001)
  • Salesforce certifications (e.g., Salesforce Administrator, Security & Privacy Specialist)
  • Proven track record in implementing risk and compliance programs across multiple geographies
  • Experience with Salesforce security and compliance features, including Shield, encryption, access controls, and audit logging
  • Experience estimating costs of remediation activities / projects, split by one-off vs recurring costs
  • Proficiency in documenting risk and control mappings for review by external auditors, with appreciation of impacts on financial statements
  • Ability to document and coach others on business process and system mapping, including RBAC structures
  • MS Office, especially MS Outlook, Excel, PowerPoint, and SharePoint; analytics skills an advantage
  • Knowledge of Crown Jewel Playbook controls (e.g., patching, MFA, data encryption, incident response) and Policy directives (e.g., govern, protect, detect)

Benefits

  • Flexible benefits fund
  • Emergency leave days
  • Adoption leave
  • 28 days annual leave (plus bank holidays)
  • Pension
  • Life cover
  • Private medical insurance
  • Parental leave
  • Education assistance program

Job title

Global Risk & Compliance Lead

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Tech skills

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job