Salesforce Compliance & Data Governance Analyst
Compliance and data governance analyst owning audit workstreams (user access reviews, POAMs, data-quality audits), data classification, and CodeScan administration for a federal VA client's Salesforce platform, presenting findings to government stakeholders in an Agile/Jira environment. Hybrid: 2 days/week in Arlington, VA.
- Compensation
- $90K–$120K / yr
- Location
- Hybrid - Arlington, VA, Arlington, VA, US
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 5+ years
- Category
- Data engineering
- Posted
Skills
Must have
- U.S. Citizen or Permanent Resident
- Public Trust clearance; employment contingent on successful background investigation
- Bachelor's degree in business, information systems, or related field
- 5+ years in compliance auditing, IT governance, or data governance, ideally in federal/government IT
- Basic understanding of Salesforce as an application development platform; ideally hands-on Salesforce Admin experience with declarative capabilities
- Familiarity with NIST AC-2, FIPS-199, POAM processes, and VA compliance frameworks (PTA/PIA) or similar
- Working knowledge of code scanning (CodeScan), web security scanning (ZAP), and related DevSecOps tools
- Experience in Agile/Scrum environments with strong Jira hygiene and daily time tracking
- Strong written and verbal communication; ability to defend findings to senior stakeholders independently
- Ability to design and run small projects (Epics) with access to SMEs and support of a BA and Scrum Master
- Comfort using AI tools (e.g., Claude) for analysis and documentation with critical evaluation of output
- Proficiency with Confluence, SharePoint, and Microsoft Office (or similar)
- Reliable internet service for effective telecommuting
Nice to have
- Salesforce certification or active Trailhead progress
Full description
Position Title: Salesforce Compliance & Data Governance AnalystLocation: Hybrid (2 days a week Arlington, VA)Other Considerations: U.S. Citizen or Permanent Resident (Required)
POSITION SUMMARY
We're seeking a self-directed Compliance & Data Governance Analyst to own and build compliance and data governance workstreams supporting a federal client's extensive Salesforce platform. This role blends traditional compliance auditing (access reviews, POAMs, data quality) with data classification strategy, CodeScan administration, and cross-team collaboration in an Agile environment.
This is a hands-on, high-ownership role. You'll independently research, synthesize findings, and present clear recommendations to technical and government stakeholders, not just gather information for someone else to interpret.
RESPONSIBILITIES
- Own audit workstreams end-to-end: user provisioning (AC-2) reviews, POAM tracking, batch job audits, and bi-yearly data quality audits
- Design and stand-up new audit workstreams from the ground up, establishing repeatable, ongoing audit processes.
- Drive data classification initiatives; able to map Salesforce fields to VA standards (CUI, FIPS-199, PTA/PIA) and identify governance gaps
- Configure CodeScan reports and support auditing of new rule enforcement as the platform evolves
- Participate actively in Agile ceremonies (PI/sprint planning, backlog refinement)
- Proficient at writing clear, well-structured Agile Stories tracked in Jira
- Use AI tools (e.g., Claude) to accelerate research and documentation, and critically evaluate that output before acting on it
- Present findings, business value, and recommendations directly to leadership and government stakeholders
QUALIFICATIONS
- Public Trust clearance is required; employment is contingent upon a successful background investigation
- Bachelor’s degree in business, information systems, or related field
- 5+ years in compliance auditing, IT governance, or data governance, ideally in a federal/government IT environment
- Basic understanding of Salesforce as an Application Development platform. Ideally with hands-on experience as a Salesforce Admin with some declarative capabilities. Certification or active Trailhead progress a plus but not required.
- Familiarity with NIST AC-2, FIPS-199, POAM processes, and VA compliance frameworks (PTA/PIA) or similar industry-specific concepts
- Working knowledge of code scanning (CodeScan), web security scanning (ZAP), and related DevSecOps toolsRequired hard skills, tools, frameworks, technologies, etc. with years of experience
- Experience working in Agile/Scrum environments, with strong Jira hygiene for work planning and execution and daily time tracking for capacity planning