Salesforce Risk & Compliance Specialist in Cambridge

Join the AVEVA team in this full-time role based in London or Cambridge. You will oversee risk management, security and compliance for our Salesforce-based Sales Enablement platforms. Reporting to the Sales Enablement Domain Director (dotted line to Head of IT GRC), this position collaborates with Sales Enablement, IT Security, legal and technology teams to design controls, manage evidence, oversee access reviews, and protect critical assets through governance, detection, response and recovery activities.

Responsibilities

• Define and maintain global compliance and risk frameworks for Salesforce implementation and operations.
• Document control designs for Sales Enablement processes, ensuring alignment with Crown Jewel Playbook controls (critical stakeholder inventory, supply-chain risk management, data inventory, user access reviews).
• Project-manage dependencies on other teams (e.g., JML feeds from HR, access reviews by business owners).
• Conduct risk assessments to identify, evaluate, and mitigate risks related to Salesforce data, processes, and integrations.
• Develop controls to ensure compliance with internal policies and external regulations.
• Ensure Salesforce configuration and operations comply with GDPR, SOX and other global/regional regulations.
• Collaborate with IT Security to design and enforce secure Salesforce configurations (SSO, MFA, RBAC, encryption).
• Oversee third-party application and integration risk assessments and respond to cyber-security incidents within the Sales Enablement scope.
• Define audit-ready processes, provide evidence of compliance for internal and external audits, establish monitoring, logging and reporting mechanisms.
• Act as liaison between compliance, security, business and Salesforce program leadership; provide guidance and training to admins, developers and stakeholders.
• Keep up-to-date with Salesforce releases and emerging technologies to maintain cutting-edge performance strategy.

Skills & Qualifications

• ISACA (CISA/CISM/CGEIT) or equivalent qualification.
• 5+ years in risk, compliance or governance roles, with 3+ years focused on Salesforce or large-scale SaaS implementations.
• Strong knowledge of GDPR, SOX, ISO 27001 and other compliance frameworks.
• Salesforce certifications such as Administrator and Security & Privacy Specialist.
• Proven track record implementing risk and compliance programmes across multiple geographies.
• Experience with Salesforce security and compliance features (Shield, encryption, RBAC, audit logging).
• Cost-estimating remediation projects, documenting risk/control mappings for external auditors.
• Excellent communication, stakeholder management and leadership skills.

Desired Skills

• Leading compliance efforts in multi-cloud Salesforce environments (Sales, Service, Marketing, etc.).

Benefits

• UK benefits (flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave plus bank holidays, pension, life cover, private medical insurance, parental leave, education assistance). Benefits may vary by country.

Hybrid Working

Employees are expected to be in the local office three days a week; some positions may be fully remote based on role and customer requirements.

Hiring Process

Submit your cover letter and CV through the application portal. AVEVA is committed to recruiting and retaining people with disabilities and will provide reasonable support during the application process.

About AVEVA

AVEVA is a global leader in industrial software, employing more than 6,500 people across 40+ countries. We are committed to sustainability, inclusion and to advancing our 2030 targets. AVEVA requires successful applicants to undergo a drug screening and comprehensive background check in accordance with local laws. AVEVA is an Equal Opportunity Employer and provides reasonable accommodation to applicants with disabilities where appropriate.