Business Information Security Officer (BISO)

Secure-by-Design / Secure-in-Operations Culture : Foster a culture of shared security responsibility by integrating security and compliance requirements throughout the infrastructure lifecycle

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field (equivalent experience may be considered)
• 10+ years of professional experience in security risk management, with at least 5 years dedicated to security operational roles supporting major cloud platforms (AWS, GCP, or multi-cloud environments)
• Exceptional executive presence, negotiation, and influence skills with ability to partner at VP+ level without direct authority
• High risk acumen and extensive experience managing complex portfolios of security risks
• Strong working knowledge of industry standards and regulations (NIST CSF, ISO 27001, SOC 2, NIST 800-160, ISO 27035, ITIL v4, DORA)
• Proven ability to build strong partnerships across all security functions (CSOC, Product Security, GRC, Enterprise Security)
• Strong understanding of CI / CD security, infrastructure-as-code, and zero-trust architecture principles
• Experience acting as a key stakeholder during major security incidents, managing executive escalations, and driving post-incident remediation
• Experience managing globally distributed teams across multiple time-zones with 24 / 7 on-call responsibilities
• Strong grasp of availability metrics (SLAs, SLOs, error budgets) and ability to balance these with security error budgets
• Foundational experience in SRE, DevOps, Big Data, or observability platforms
• Experience with auto-remediation platforms and chaos engineering
• Solid understanding of hyper-scale architectures (like Hyperforce), containerization (Kubernetes), microservices, and distributed systems
• Experience building or leading vulnerability management programs with context-based prioritization (SSVC, EPSS)
• Strong understanding of IAM lifecycle, governance, and architecture (Least Privilege, RBAC / ABAC, SSO, MFA)
• Demonstrated experience as a Business Information Security Officer (BISO) or equivalent security leadership role
• Certifications such as CCSP, CISSP, CISM, AWS Certified Security Specialty, GCP Security Engineer, or CKS
• Strong understanding of Secure SDLC, threat modeling, and integrating security checks (SAST / DAST) into development pipelinesWhen you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and
• be your best
• , and our AI agents accelerate your impact so you can
• do your best
• . Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world.Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

#J-18808-Ljbffr