Senior Enterprise Security Analyst - Risk & Stakeholder Lead

Salesforce; New York (NY); On-site; USD 105,000 - 150,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off

Job summary

Salesforce seeks a Senior Analyst in Enterprise Security to support BISOs in daily engagements, tracking risks and commitments, coordinating deliverables, and preparing materials for reviews in a large corporate IT environment.

You will help maintain an accurate risk register, track buy-downs, and prepare stakeholder dashboards under BISO direction, while leveraging experience with NIST 800-53 controls and security frameworks.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.
• Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF)).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience with data and reporting tools such as Tableau or Visio.
• Design and implementation of internal controls in response to identified risks.
• CISSP, CISA, PMP, or CISM certification preferred.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates.
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Risk management

Security controls

Security governance

Security risk articulation

Tools

Tableau

Visio

Job description

Salesforce seeks a Senior Analyst in Enterprise Security to support BISOs in daily engagements, tracking risks and commitments, coordinating deliverables, and preparing materials for reviews in a large corporate IT environment.

You will help maintain an accurate risk register, track buy-downs, and prepare stakeholder dashboards under BISO direction, while leveraging experience with NIST 800-53 controls and security frameworks.