Senior Analyst – Enterprise Security & Risk

salesforce.com, inc.; San Francisco (CA); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Senior Analyst in Enterprise Security to support BISOs in day-to-day engagements with business unit customers. You will track risks, assemble materials for reviews, and ensure operational cadence.

This role builds on a cybersecurity foundation and interfaces with experienced security professionals to keep engagements credible and well-documented. You will help manage risk registers, coordinate with BISOs and teams, and prepare stakeholder materials while not making

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (COSO, CSF).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units; track findings and status.
• Track risk buy-down commitments, owners, dates, and flag slippage to the BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Security risk management

Controls testing/implementation

Stakeholder communication

COSO/CSF knowledge

Tools

Tableau

Visio

Job description

Salesforce is seeking a Senior Analyst in Enterprise Security to support BISOs in day-to-day engagements with business unit customers. You will track risks, assemble materials for reviews, and ensure operational cadence.

This role builds on a cybersecurity foundation and interfaces with experienced security professionals to keep engagements credible and well-documented. You will help manage risk registers, coordinate with BISOs and teams, and prepare stakeholder materials while not making