Senior Enterprise Security Analyst (Security Partner)

Salesforce; New York (NY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off

Job summary

Salesforce is seeking a Senior Analyst within Enterprise Security to support BISOs in day-to-day engagements with business unit customers. You will track risks, coordinate deliverables, and prepare materials for stakeholder reviews while maintaining credibility and a strong operational rhythm.

Ideal candidates bring 3+ years in a corporate IT or consulting setting, experience with NIST SP 800-53, and a solid grasp of security governance (COSO, CSF).

Qualifications

• 3+ years of experience in consulting or a large corporate IT environment.
• Experience implementing and testing security controls based on NIST SP 800-53.
• Strong understanding of security internal control methodologies and terminology (COSO, CSF).
• Ability to identify and articulate key security risks and develop controls to mitigate them.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates.
• Track risk buy-down commitments - owners, dates, status - and flag slippage to the responsible BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.
• Support BISOs in day-to-day activities and keep engagements running smoothly.

Skills

Risk assessment

Stakeholder communication

Security controls testing

Documentation & reporting

Governance familiarity

Tools

NIST SP 800-53

COSO

CSF

Job description

• Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security
• As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly - tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews
• This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won't make independent architectural or risk-acceptance calls - those sit with the BISOs you support
• You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers
• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments - owners, dates, status - and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year

• You have 3+ years of experience in consulting or a large corporate environment with a complex IT environment
• You have experience implementing and testing security controls based on the NIST SP 800-53 standard
• You have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
• You can identify and articulate key security risks and develop controls to mitigate them