Senior Enterprise Security & Risk Analyst

salesforce.com, inc.; New York (NY); On-site; USD 117,000 - 177,000; Full time

Job summary

Salesforce is seeking a Senior Analyst in Enterprise Security to support BISOs in daily operations, maintain risk registers, and prepare materials for leadership reviews. You will work with BISOs to keep engagements credible, visible, and well-documented, ensuring risk-related activities are tracked and escalated appropriately.

The role involves coordinating with business units, reporting on risks, and contributing to the security program while leveraging a solid cybersecurity foundation and

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (COSO, CSF).
• Ability to identify and articulate key security risks and develop controls to mitigate them.
• Experience implementing and testing security controls based on the NIST SP 800-53 standard.

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units and track findings and status.
• Track risk buy-down commitments - owners, dates, status - and flag slippage to the BISO.
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction.
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up.

Skills

Security risk analysis

Framework knowledge

Risk controls development

Tools

Tableau

Visio

Job description

Salesforce is seeking a Senior Analyst in Enterprise Security to support BISOs in daily operations, maintain risk registers, and prepare materials for leadership reviews. You will work with BISOs to keep engagements credible, visible, and well-documented, ensuring risk-related activities are tracked and escalated appropriately.

The role involves coordinating with business units, reporting on risks, and contributing to the security program while leveraging a solid cybersecurity foundation and