Senior Enterprise Security Analyst (Security Partner)

Salesforce; New York (NY); On-site; USD 105,000 - 150,000; Full time

Benefits offered by this job

Medical Care

Life Insurance

Retirement Savings

Employee Assistance Programs

13 paid days off

Job summary

Salesforce seeks a Senior Analyst in Enterprise Security to support BISOs in daily engagements, tracking risks and commitments, coordinating deliverables, and preparing materials for reviews in a large corporate IT environment.

You will help maintain an accurate risk register, track buy-downs, and prepare stakeholder dashboards under BISO direction, while leveraging experience with NIST 800-53 controls and security frameworks.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.
• Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF)).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience with data and reporting tools such as Tableau or Visio.
• Design and implementation of internal controls in response to identified risks.
• CISSP, CISA, PMP, or CISM certification preferred.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates.
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Risk management

Security controls

Security governance

Security risk articulation

Tools

Tableau

Visio

Job description

• Enterprise Security is looking for a Senior Analyst to support our Business Information Security Officers (BISOs) in their day-to-day work with Enterprise business unit customers. BISOs drive measurable security improvements and own the health of the relationship between their business units and Enterprise Security
• As a Senior Analyst, you work alongside BISOs to keep those engagements running smoothly — tracking risks and commitments, coordinating deliverables, and preparing materials for stakeholder reviews
• This role suits someone building on a solid cybersecurity foundation while working alongside experienced security professionals. You won’t make independent architectural or risk-acceptance calls — those sit with the BISOs you support
• You will make their work visible, actionable, and well-documented, and own the operational rhythm that keeps the team credible with its business unit customers
• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

Benefits

• Medical Care
• Life Insurance
• Retirement Savings
• Employee Assistance Programs
• With 9 standard holidays and four floating holidays, you get a total 13 paid days off each year

You have 3+ years of experience in consulting or a large corporate environment with a complex IT environmentYou have experience implementing and testing security controls based on the NIST SP 800-53 standardYou have strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))You can identify and articulate key security risks and develop controls to mitigate themYou’re experienced with data and reporting tools such as Tableau or VisioYou’ve designed and implemented internal controls in response to identified risksYou hold a CISSP, CISA, PMP, or CISM certification