Product Security (BISO)

Join Salesforce's Product Security team, where you'll play a pivotal role in securing customer data and assets. As a Business Information Security Officer (BISO), you'll manage stakeholder expectations and business risk, prioritize and optimize the security backlog, and collaborate with product and engineering teams. This role requires a deep understanding of software security, strong stakeholder management skills, and the ability to thrive in a fast-paced environment.

• Manage stakeholder expectations and business risk for the Business units, prioritizing and tracking the execution of the security backlog.
• Drive security initiatives and improve risk posture by collaborating with product and engineering teams.
• Utilize deep technical understanding and business risk impact to optimize security processes and ensure compliance with security frameworks.

• This pivotal role for a BISO within our product security organization requires a blend of real-world experience and deep knowledge in software security, including application security, cloud security, secure coding practices, and security architecture, especially across Software as a Service (SaaS) and On-premise services
• The ideal candidate will have a proven track record of excellence in security delivery and the ability to work with a broad set of executive stakeholders across business units and security teams to drive security initiatives and improve risk posture
• Deep understanding of security principles across all tech layers, including cloud platforms (AWS, Azure, GCP), infrastructure security (network, endpoint, IAM), application security (SAST, DAST, secure coding), and third-party risk management frameworks
• Ability to thrive in a dynamic, fast-paced environment, staying ahead of emerging threats and adapting strategies to evolving business needs
• Strong stakeholder management and collaboration skills to work with cross-functional teams and ability to influence decision-making without direct authority
• Strong understanding of security and compliance frameworks (e.g., SOX, NIST CSF, ISO 27001/2, CIS Controls)
• A related technical degree required
• Demonstrated ability to work independently, take ownership of security initiatives, and drive results with minimal supervision
• Familiarity with security tools such as SIEM: Splunk specifically, vulnerability scanners (e.g., Qualys, Nessus), or IAM solutions (e.g., Okta, SailPoint)
• Customer-focused: You know how to balance your "get it done" attitude with diplomacy to be able to work effectively across different teams and at all levels
• Strong executive presence and immaculate ability to articulate technical security concepts in a business/risk context
• 10+ years of experience in information security, with at least 5-10 years in a leadership role focused on technical security across cloud, infrastructure, applications, and third-party integrations
• Excellent communication skills to translate complex security concepts into business-friendly language
• Proven ability to prioritize initiatives utilizing risk data from multiple input sources, while staying aligned with the bigger picture
• Deep understanding of securing AI solutions
• Prior experience as BISO or equivalent is desirable
• Ability to cultivate strong working relationships with customer teams and internal security teams, including those in international locations
• Strong willingness to challenge status quo and drive continuous improvement through change and new ideas
• Certifications like CISM or CISSP highly desired
• Track record of auditing related or consulting experience, high tech industry a plus