Role Overview
We are seeking a Lead / Senior Salesforce Business Analyst with approximately 8 years of professional experience, specializing in enterprise access management, security rationalization, and Salesforce platform architecture.
The role involves leading end-to-end business analysis for a large-scale access and security transformation initiative.
The candidate will bridge the gap between business stakeholders and technical architects by conducting current-state security audits, facilitating cross-functional persona workshops, mitigating access risks, and designing streamlined and scalable Role-Based Access Control (RBAC) models.
A strong understanding of modern Salesforce security constructs, Agentic AI/Agentforce, Flow orchestration, and enterprise governance standards is required to support sustainable and future-ready implementations.
Key Responsibilities
- Persona Workshops & Requirements Elicitation
- Facilitate discovery workshops across global business units.
- Define user personas.
- Map core business processes.
- Establish least-privilege access models.
- Current-State Audit & Inventory Assessment
- Oversee the extraction, mapping, and audit of legacy Salesforce security assets, including:
- Profiles
- Permission Sets
- Permission Set Groups
- Roles
- Queues
- Licenses
- Integration/System Users
- Access Risk, SoD & Compliance Analysis
- Identify operational risks associated with:
- Over-privileged access
- Orphaned accounts
- Segregation of Duties (SoD) violations
- License bloat
- Produce actionable risk remediation matrices and impact analyses.
- Permission Model Rationalization
- Design target-state RBAC and ABAC architectures using:
- Permission Set Groups
- Muting Permission Sets
- Restriction Rules
- Public Groups
- Reduce technical debt and enforce modern governance practices.
- AI & Automation Governance
- Evaluate and define access boundaries for advanced platform capabilities, including:
- Agentforce / Agentic AI
- Einstein features
- Automated Flows
- Ensure AI agents and automation operate within strictly defined security guardrails.
- Stakeholder Management & Documentation
- Translate complex security concepts into executive-ready reports.
- Create and maintain:
- User Stories
- Traceability Matrices
- Change Management Documentation
- Secure stakeholder alignment and buy-in from business and IT leadership.
Required Skills & Qualifications
Professional Experience
- 8–10 years of total experience as a Business Analyst.
- 5+ years dedicated to Salesforce enterprise implementations and security/data governance projects.
Salesforce Security
Deep functional understanding of Salesforce sharing architecture, including:
- Organization-Wide Defaults (OWD)
- Role Hierarchy
- Sharing Rules
- Permission Sets
- Field-Level Security
- Restriction / Scoping Rules
Identity & Access Management (IAM)
Knowledge of:
- SSO
- MFA
- OAuth Flows
- Connected Apps
- Integration User Patterns
- Segregation of Duties (SoD) frameworks
Methodologies & Deliverables
Demonstrated ability to create:
- Business Requirements Documents (BRDs)
- Functional Specifications
- Current-to-Future State Mapping Matrices
- Process Flowcharts using Lucidchart / Visio
- Jira / ADO User Stories
Communication & Leadership
- Exceptional facilitation skills.
- Ability to lead workshops with:
- Business Leaders
- Compliance Officers
- Technical Architects
Preferred Certifications
- Salesforce Certified Business Analyst
- Salesforce Certified Administrator / Advanced Administrator
- Salesforce Certified Identity and Access Management Architect
- PMI-PBA or CBAP – Bonus