Senior Product Security BISO Leader

Socket.dev; California (MO); On-site; USD 197,000 - 401,000; Full time

Job summary

Salesforce's Product Security team is seeking a senior BISO to lead security strategy across SaaS and on‑premises services, collaborating with product and engineering to balance risk and trust. You will prioritize initiatives, translate complex security concepts for executives, and drive security outcomes across business units while aligning with SOX, NIST CSF, ISO 27001/2, and CIS Controls.

This role requires deep technical expertise, strong stakeholder management, and the ability to influence

Qualifications

• 10+ years in information security with 5–10 years in leadership.
• Deep understanding of security principles across cloud, infra, apps, and third-party risk management.
• Familiarity with SIEM (Splunk), vulnerability scanners (Qualys, Nessus), and IAM tools (Okta, SailPoint).
• Ability to work independently and drive security initiatives with minimal supervision.
• Excellent communication to explain security concepts to executives.
• Customer-focused and able to balance speed with diplomacy across teams.
• Ability to prioritize initiatives using risk data from multiple sources.
• Strong knowledge of SOX, NIST CSF, ISO 27001/2, CIS Controls.
• Thrives in fast-paced environments and adapts to evolving threats.
• Related technical degree required.
• Strong stakeholder management and collaboration skills.

Responsibilities

• Lead security initiatives across product security and business units.
• Collaborate with product and engineering teams to drive risk outcomes.
• Translate security requirements into actionable backlog for engineering.

Skills

Security leadership

Cloud security

App security

Third-party risk

Executive communication

Risk prioritization

Security frameworks

Security architecture

Education

Related technical degree

Tools

Splunk

Qualys

Nessus

Okta

SailPoint

Job description

Salesforce's Product Security team is seeking a senior BISO to lead security strategy across SaaS and on‑premises services, collaborating with product and engineering to balance risk and trust. You will prioritize initiatives, translate complex security concepts for executives, and drive security outcomes across business units while aligning with SOX, NIST CSF, ISO 27001/2, and CIS Controls.

This role requires deep technical expertise, strong stakeholder management, and the ability to influence