Senior Enterprise Security & Risk Analyst

Salesforce, Inc.; New York, Northern (NY, KY); Hybrid; USD 117,000 - 177,000; Full time

Job summary

Salesforce in New York is seeking a Senior Analyst to support BISOs in day-to-day engagements with enterprise business units. You’ll help keep risk registers accurate, track commitments, and prepare materials for stakeholder reviews.

You’ll work alongside security professionals to keep engagements credible, identify risks, and implement and test controls based on NIST SP 800-53, COSO and CSF concepts. Proficiency with Tableau or Visio is a plus.

Qualifications

• 3+ years of experience in consulting or a large corporate environment with a complex IT environment.
• Strong understanding of security internal control methodologies and terminology (e.g., COSO, Cybersecurity Framework (CSF))
• Ability to identify and articulate key security risks and develop controls to mitigate them
• Experience implementing and testing security controls based on the NIST SP 800-53 standard

Responsibilities

• Maintain an accurate, prioritized risk register for assigned business units, including intake of new findings and status updates
• Track risk buy-down commitments — owners, dates, status — and flag slippage to the responsible BISO
• Prepare recurring stakeholder materials (status decks, dashboards, executive read-outs) under BISO direction
• Coordinate meetings between BISOs, business unit customers, and specialist teams; capture actions and drive follow-up

Skills

Security risk assessment

COSO

CSF

NIST SP 800-53

Tableau

Visio

CISSP

CISA

PMP

CISM

Risk management

Tools

Tableau

Visio

Job description

Salesforce in New York is seeking a Senior Analyst to support BISOs in day-to-day engagements with enterprise business units. You’ll help keep risk registers accurate, track commitments, and prepare materials for stakeholder reviews.

You’ll work alongside security professionals to keep engagements credible, identify risks, and implement and test controls based on NIST SP 800-53, COSO and CSF concepts. Proficiency with Tableau or Visio is a plus.