Product Security BISO: Risk & Stakeholder Leader

Salesforce, Inc.; Ashington; On-site; GBP 120,000 - 150,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off

Job summary

Salesforce, Inc. is seeking a senior security leader to serve as a BISO within the Product Security organization.

You will manage stakeholder expectations and business risk for the business units and drive security initiatives across cloud, infrastructure, and applications, including third‑party risk management. The role requires 10+ years in information security with leadership experience, strong communication, and the ability to translate technical concepts into business risk terms.

Qualifications

• A related technical degree is required.
• 10+ years in information security with 5-10 in a leadership role across cloud, infrastructure, applications and third‑party integrations.
• Certifications like CISM or CISSP are highly desirable.
• Auditing/consulting experience in high tech environments is a plus.
• Strong executive presence and ability to translate technical security into business risk terms.

Responsibilities

• Manage stakeholder expectations and business risk for business units.
• Prioritize, optimize, and track the security backlog across product engineering.
• Drive security initiatives and improve risk posture across security teams.
• Collaborate with executive stakeholders across units to influence decision-making.

Skills

Software security

Application security

Cloud security

Secure coding

Security architecture

Stakeholder management

Compliance frameworks

SIEM

Vulnerability scanners

IAM solutions

AI security

Leadership

Communication

Education

Related technical degree

Tools

Splunk

Qualys

Nessus

Okta

SailPoint

Job description

Salesforce, Inc. is seeking a senior security leader to serve as a BISO within the Product Security organization.

You will manage stakeholder expectations and business risk for the business units and drive security initiatives across cloud, infrastructure, and applications, including third‑party risk management. The role requires 10+ years in information security with leadership experience, strong communication, and the ability to translate technical concepts into business risk terms.