Enterprise Security Partner Director (BISO)

Salesforce, Inc.; Bellevue (WA); Hybrid; USD 197,000 - 314,000; Full time

Job summary

Salesforce, Inc. is seeking a Director, Business Information Security Officer to lead security for a major Enterprise BU.

You will drive architecture decisions, manage a small team of Security Partners, and partner with engineers, product leaders, and executives to balance risk and delivery. Based in the US with a hybrid work arrangement, you will own risk buy-down, threat modeling, and regulatory compliance across FedRAMP, SOX, and data protection laws, shaping the SDLC with secure-by-design

Qualifications

• 12+ years in cybersecurity engineering, IT risk, or related field in a large enterprise.
• Experience as a BISO, Security Partner, or similar senior security leader for a BU or product.
• Led security professionals and built high-performing teams.
• Deep technical knowledge of cloud, identity, application security, and AI/ML risks.
• Familiar with COSO, NIST CSF, NIST SP 800-53, and FedRAMP/SOX/regional data laws.

Responsibilities

• Own the security relationship for the assigned BU and represent voice inside Enterprise Security.
• Set risk severity, prioritization, and buy-down sequencing; route risk-acceptance to executives.
• Build risk buy-down plans with owners and dates; escalate progress as needed.
• Lead security input on design reviews, threat models, SDLC, and secure-by-design patterns.
• Deliver quarterly risk narratives and posture metrics for CISO, CIO, and Board.
• Coordinate with security engineers, CSOC, TPMs, and other specialists.
• Track AI/ML risks and translate into concrete risk and control decisions.
• Incorporate regulations (FedRAMP, SOX, data laws) into risk view with Legal/Privacy/Compliance.
• Drive adoption of security tooling and data-driven decision making.
• Develop Security Partner Leads and succession plans; maintain operating cadence.

Skills

Security leadership

Cloud security

Risk management

Threat modeling

Executive communication

AI/ML risk awareness

Regulatory compliance

Security architecture

Data-driven leadership

Education

Bachelor's degree in CS/Engineering

Job description

Salesforce, Inc. is seeking a Director, Business Information Security Officer to lead security for a major Enterprise BU.

You will drive architecture decisions, manage a small team of Security Partners, and partner with engineers, product leaders, and executives to balance risk and delivery. Based in the US with a hybrid work arrangement, you will own risk buy-down, threat modeling, and regulatory compliance across FedRAMP, SOX, and data protection laws, shaping the SDLC with secure-by-design