Director, BISO & Enterprise Security Leadership

Salesforce, Inc.; Dallas (TX); Hybrid; USD 197,000 - 314,000; Full time

Job summary

Salesforce, Inc. is seeking a Director to lead Enterprise Security as a Security Partner for major BUs. You will guide architecture decisions, risk prioritization, and security strategy across cloud, identity, and AI/ML risks, coordinating with CISO/CIO and the Board.

A hybrid work arrangement is offered across multiple U.S. locations. You will manage a team of Security Partners, drive risk buy-down plans, and shape SDLC security practices while ensuring regulatory and contractual compliance

Qualifications

• 12+ years of experience in cybersecurity engineering, IT risk, or a closely related field
• Experience as a BISO, Security Partner, or similar senior security leader
• Deep technical knowledge of cloud, identity, application security, and AI/ML risks
• Knowledge of control frameworks such as COSO, NIST CSF, and NIST SP 800-53

Responsibilities

• Own the security relationship for your assigned BU.
• Represent security in customer leadership discussions.
• Own the risk register and set severity/timelines.
• Lead design reviews, threat models, and architecture decisions.
• Shape SDLC with secure-by-design patterns and guardrails.
• Deliver quarterly reviews and posture metrics for executives.

Skills

Cybersecurity leadership

IT risk

Security engineering

Cloud security

AI/ML risks

Threat modeling

Architecture reviews

Education

Bachelor's degree in CS/Engineering/Info Systems/Cyber Security

Tools

COSO Framework

NIST CSF

NIST SP 800-53

Job description

Salesforce, Inc. is seeking a Director to lead Enterprise Security as a Security Partner for major BUs. You will guide architecture decisions, risk prioritization, and security strategy across cloud, identity, and AI/ML risks, coordinating with CISO/CIO and the Board.

A hybrid work arrangement is offered across multiple U.S. locations. You will manage a team of Security Partners, drive risk buy-down plans, and shape SDLC security practices while ensuring regulatory and contractual compliance