S

Salesforce

Builds cloud software for customer relationships

Business Information Security Officer – Product Security

Security Governance, Risk & ComplianceUpdated on Nov 11
Full-timeIn-person

About the Job

Requirements

  • At least 10 years of experience in information security, including 5–10 years in a leadership role focused on technical security across cloud, infrastructure, applications, and third-party integrations.
  • Deep understanding of security principles across cloud platforms such as AWS, Azure, and GCP; infrastructure security including network, endpoint, and identity and access management; application security including static and dynamic application security testing and secure coding; and third-party risk management frameworks.
  • Familiarity with security information and event management tools, specifically Splunk; vulnerability scanners such as Qualys or Nessus; or identity and access management solutions such as Okta or SailPoint.
  • Ability to work independently, own security initiatives, and drive results with minimal supervision.
  • Ability to communicate technical security concepts in a business and risk context to executive stakeholders.
  • Ability to prioritize initiatives using risk data from multiple sources while remaining aligned with broader objectives.
  • Strong understanding of security and compliance frameworks such as SOX, NIST Cybersecurity Framework, ISO 27001/2, and CIS Controls.
  • Ability to adapt security strategies to emerging threats and evolving business needs.
  • Strong stakeholder management and collaboration skills to work with cross-functional teams and influence decisions without direct authority.
  • A related technical degree is required.

Responsibilities

  • Manage stakeholder expectations and business risk for business units.
  • Prioritize, optimize, and track the execution of the security backlog through a single work stream for product engineering, using technical understanding and business-risk impact.

Desired Qualifications

  • Deep understanding of securing artificial intelligence solutions.
  • Prior experience as a Business Information Security Officer or equivalent.
  • Ability to cultivate working relationships with customer teams and internal security teams, including teams in international locations.
  • Willingness to challenge the status quo and drive continuous improvement through change and new ideas.
  • Track record of auditing or consulting experience; high-tech industry experience is a plus.
  • Certifications such as CISM or CISSP.

About the Company

Salesforce

Builds cloud software for customer relationships

Salesforce sells cloud software that helps businesses manage sales leads, customer service, marketing, and online commerce from shared customer records. Its flagship Sales Cloud tracks accounts and deals, while Service Cloud organizes support cases and Agentforce builds AI assistants that act on company data. Teams access these tools through a browser and connect outside apps and data sources, with Slack for work messages and Tableau for visual analysis. Salesforce earns most of its revenue from software subscriptions and support, with professional services for implementation and training. Marc Benioff co-founded Salesforce in 1999, and its headquarters are in San Francisco, California.

Company size
10,001+
Company stage
IPO
Headquarters
San Francisco, CA
Founded
1999

Recently Posted Jobs

Explore more opportunities at Salesforce

See more jobs