Sr. Security Governance Engineer, Secure Build & Change
InformaticaBase Salary
$149k - $224k/yr
Responsibilities
- Develop and maintain security policies, technical standards, control requirements, and policy lifecycle processes.
- Define structured, machine-readable governance-as-code and policy-as-code requirements using tools such as OPA/Rego or cloud-native policy frameworks.
- Collaborate with engineering to establish guardrails and validation criteria, and review implementations for alignment with policy intent.
- Maintain a common control framework with objectives, ownership, validation criteria, and traceability from regulation to implementation and evidence.
- Define expectations for preventive, detective, and compensating controls and support continuous evaluation of control effectiveness.
- Act as the subject-matter expert and point of contact for assigned security control families, assessing gaps, exceptions, emerging risks, and improvements.
- Partner with Security Engineering, Product Security, Cloud Security, IAM, Compliance, Risk, Audit, Legal, and business teams on architecture and design discussions.
- Improve governance speed, scalability, visibility, and integration into engineering workflows.
Requirements
- U.S. citizenship or permanent residency is required; the employer cannot provide visa sponsorship for this role.
- At least 7 years of experience in information security governance, security engineering, technology risk, or related functions.
- Strong understanding of security policies, standards, control frameworks, and governance processes.
- Familiarity with NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or PCI DSS.
- Ability to translate regulatory and security requirements into measurable control objectives.
- Working knowledge of cloud security, IAM, application security, infrastructure security, and data security.
- Understanding of preventive and detective control design, risk assessment, and exception management.
- Familiarity with modern development practices, cloud environments, and CI/CD.
- Strong analytical, communication, documentation, and stakeholder-management skills.
- Experience with governance-as-code or policy-as-code and policy engines such as OPA/Rego or HashiCorp Sentinel is preferred.
- Familiarity with YAML, JSON, Git, infrastructure-as-code, and DevSecOps is preferred.
- Experience with GRC platforms, Common Controls Frameworks, and OSCAL is preferred.
- Exposure to security posture management, compliance validation, architecture reviews, or AI governance is preferred.
Benefits
- Salesforce provides time-off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program.
- The listed base salary is $148,500–$223,900 annually, or $178,900–$246,000 annually in select San Francisco and New York City metropolitan areas; bonus, equity, and benefits are excluded from these ranges.
Tech Stack
Categories
About Informatica
Informatica (NYSE: INFA), a leader in AI-powered enterprise cloud data management, helps businesses unlock the full value of their data and AI. As data grows in complexity and volume, Informatica’s Intelligent Data Management Cloud™ delivers a complete, end-to-end platform with a suite of industry-leading, integrated solutions to connect, manage and unify data across any cloud, hybrid or multi-cloud environment. Powered by CLAIRE® AI, Informatica’s platform integrates natively with all major cloud providers, data warehouses and analytics tools— giving organizations the freedom of choice, avoiding vendor lock-in and delivering better ROI by enabling access to governed data, simplifying operations and scaling with confidence. Trusted by approximately 5,000 customers in nearly 100 countries—including over 80 of the Fortune 100—Informatica is the backbone of platform-agnostic, cloud data-driven transformation. Informatica. Where data and AI come to life.™ Contact: PR@informatica.com