Senior Enterprise Security & Risk Analyst

Salesforce; Bellevue (WA); On-site; USD 117,000 - 194,000; Full time

Job summary

Salesforce is seeking a Senior Analyst within Enterprise Security to support BISOs, manage risk, and keep engagements with business units credible and well-documented. You will help track risks, prepare stakeholder materials, and coordinate cross-team efforts to safeguard enterprise systems.

Ideal candidates have extensive IT security experience, familiarity with COSO/CSF, and hands-on use of tools like Tableau or Visio. CISSP/CISA/PMP/CISM certifications are a plus.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (COSO, CSF).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience implementing and testing security controls based on NIST SP 800-53.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

Skills

Security risk management

COSO/CSF familiarity

NIST SP 800-53

Stakeholder communication

CISSP

CISA

PMP

CISM

Education

Bachelor's degree in IT/Security

Tools

Tableau

Visio

Job description

Salesforce is seeking a Senior Analyst within Enterprise Security to support BISOs, manage risk, and keep engagements with business units credible and well-documented. You will help track risks, prepare stakeholder materials, and coordinate cross-team efforts to safeguard enterprise systems.

Ideal candidates have extensive IT security experience, familiarity with COSO/CSF, and hands-on use of tools like Tableau or Visio. CISSP/CISA/PMP/CISM certifications are a plus.