Senior Security & Compliance Analyst
Security & Compliance Analyst
Every customer and prospect who evaluates Salesloft asks the same question: can we trust this platform with our data? As a Security & Compliance Analyst on our Governance, Risk & Compliance (GRC) team, you will own the written and operational work that answers that question — and keeps the answer fast, accurate, and credible.
This is a role for someone who thrives on bringing order to complexity. You'll keep our security program visible and scalable, making sure customers, prospects, and internal stakeholders have the information they need to trust Salesloft's security program.
On a day-to-day basis, you will:
- Own the end-to-end security questionnaire process, triaging, completing, and tracking inbound customer and prospect questionnaires with speed and accuracy
- Maintain a centralized knowledge base of approved security answers and use questionnaire automation tools (e.g., Conveyor, Vanta, Drata, or similar) to scale response capacity without sacrificing quality
- Build and maintain the public-facing Salesloft Trust Portal and reusable customer-facing collateral, including one-pagers, FAQs, security overviews, and data flow documentation
- Support compliance activities across ISO 27001, SOC 2, GDPR, and other applicable frameworks, including coordinating evidence collection with third-party auditors and internal control owners
- Assist with recurring security program activities, including user access reviews, policy maintenance, and control audits
- Help identify, document, and track security and privacy risks with departmental stakeholders, and support the security awareness training program by maintaining and distributing training content
This role lives at the heart of how we Lead From the Front: you'll automate what's manual and prototype better answers before polishing them. And in the spirit of how we Make Your Mark, you'll treat questionnaires, collateral, and the Trust Portal like products — building documentation and systems that scale and stand on their own.
We are seeking a detail-oriented, collaborative security professional who is comfortable operating in a support capacity — keeping the team organized, customers informed, and compliance activities on track. You don't need to be the most senior person in the room; you need to be reliable, thorough, and proactive.
You embody what we call Evidence Over Ego — you back your answers with documented evidence rather than assumption, and you are candid when something isn't yet true or isn't yet documented. You bring systems thinking to everything you touch, fixing the root cause of a recurring questionnaire gap instead of answering it one more time.
If you want to build your career in GRC alongside a team that depends on your reliability, this is the right move.
Our GRC team is made up of seasoned and up-and-coming compliance and security professionals who keep Salesloft's security program credible to customers, auditors, and internal partners alike.
The team Moves as One — one group grounded in mutual trust and shared ownership, where tension is named directly instead of worked around. And we are relentlessly Customer-Inspired: every decision traces back to a single question — does this make our customer more successful?
The skill set:
- 3+ years of experience in information security, GRC, compliance, or a related field
- Experience handling security questionnaires or working within a questionnaire management process
- Familiarity with maintaining documentation, knowledge bases, or content libraries
- Working knowledge of ISO 27001, SOC 2 Trust Services Criteria, GDPR, and other common security standards
- Strong written communication skills, with the ability to translate security concepts into clear, accessible language
- Comfortable joining customer-facing calls and supporting security conversations
- Highly organized with strong attention to detail; collaborative and comfortable in a support role
- Ability to handle proprietary and sensitive information with discretion; CISA or similar certification is a plus
