Security GRC Senior Lead

About the role

Salesforce is seeking a highly skilled Security GRC Senior Lead for South Korea to lead cybersecurity compliance efforts across the APAC region. The role reports to the Director, Cyber Security & Compliance Strategist and involves engaging with external auditors, regulatory bodies, and internal stakeholders.

Key responsibilities

• Partner with customer trust and security teams to communicate Salesforce’s cybersecurity practices.
• Manage comprehensive compliance programs aligned with global standards and local regulations.
• Collaborate with APAC Assurance and engineering teams to drive CSP Safety Assessments and regional audits.
• Support development and refresh of certification artifacts, including ISMS, risk assessments, and security policies.
• Liaise with external auditors and internal teams to support certification audits.

Required profile

• Minimum 5 years in security governance, risk management, compliance, audit, or related areas and 7‑10 years total experience.
• Fluent in Korean and English; additional Asian languages a plus.
• Bachelor’s degree in Information Security, Computer Science, or related field; advanced degrees or certifications (CISSP, CISA, CISM) preferred.
• Deep understanding of commercial and regulatory compliance and cybersecurity concepts.

Required skills

• Korean and English language proficiency.
• Experience with CSP Safety audits and certification processes.
• Hands‑on experience with AWS and other cloud environments.
• Knowledge of security frameworks and standards: ISO 27001, NIST Cybersecurity Framework, SOC 2, K‑ISMS, CSAP, ISMAP, MTCS, PCI.
• Ability to define security policies, standards, and controls.