Director, BISO - Enterprise Security

About the role

Salesforce's Enterprise Security organization is seeking a Director, Enterprise Security, Business Information Security Officer (BISO), also known as a Security Partner. This senior technical leadership position is accountable for the security posture of major Enterprise Business Units (BUs) and serves as the primary point of contact between BU customers and the broader Security organization. The role requires deep technical fluency across cloud, identity, application, and AI/ML security, strong business judgment for risk prioritization, and the ability to influence senior stakeholders across engineering, product, legal, privacy, compliance, and finance.

Location: New York, San Francisco, Bellevue

Responsibilities

• Own the end‑to‑end security relationship for the assigned Business Unit, acting as the credible voice between BU leadership and Enterprise Security.
• Maintain and prioritize the risk register for the portfolio, setting severity, remediation sequencing, and building resourced plans with owners and dates.
• Lead security engagement on design reviews, threat models, and architecture decisions to embed secure‑by‑design patterns early in the development lifecycle.
• Direct the BU side of active security incidents, coordinating with the Cybersecurity Operations Center (CSOC) and executive stakeholders while managing and developing a team of Security Partner professionals.

Requirements

• 12+ years of experience in cybersecurity, IT risk, or a related discipline, including significant time in a large, complex enterprise.
• Prior experience as a BISO, Security Partner, or equivalent senior security leadership role.
• Deep technical fluency across cloud, identity, application, and AI/ML security, with the ability to provide substantive technical viewpoints in design reviews and threat models.
• Proven track record of prioritizing and communicating risk to executive audiences, including CISO, CIO, GM, and Board‑level stakeholders.
• Experience managing and developing security professionals and operating effectively under ambiguity in a fast‑moving, cross‑functional environment.

Preferred qualifications

• Professional certifications such as CISSP, CISA, CISM, or equivalent.
• Experience in regulated industries or product lines (e.g., financial services, public sector, healthcare).
• Background integrating acquired entities or divestitures into enterprise security programs.
• Working knowledge of regulatory frameworks (FedRAMP, SOX, regional data‑protection regimes) and control frameworks (NIST CSF, NIST SP 800‑53).

Benefits

• Time‑off programs
• Medical, dental, and vision coverage
• Mental health support
• Paid parental leave
• Life and disability insurance
• 401(k) retirement plan
• Employee stock purchase program

More details are available at Salesforce Benefits.

Pay

The typical base salary range for this position is $197,300 – $313,700 annually. In select cities within the San Francisco and New York City metropolitan areas, the base salary range is $237,700 – $344,700 annually. The range represents base salary only and does not include bonus, equity, or benefits.